9drive 1.0.0

package/LICENSE

@@ -0,0 +1,201 @@
+                              Apache License
+                        Version 2.0, January 2004
+                     http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or
+      Object form, that is based on (or derived from) the Work and for
+      which the editorial revisions, annotations, elaborations, or other
+      modifications represent, as a whole, an original work of authorship.
+      For the purposes of this License, Derivative Works shall not include
+      works that remain separable from, or merely link (or bind by name) to
+      the interfaces of, the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute
+          must include a readable copy of the attribution notices
+          contained within such NOTICE file, excluding those notices
+          that do not pertain to any part of the Derivative Works, in
+          at least one of the following places: within a NOTICE file
+          distributed as part of the Derivative Works; within the Source
+          form or documentation, if provided along with the Derivative
+          Works; or, within a display generated by the Derivative Works,
+          if and wherever such third-party notices normally appear.
+          The contents of the NOTICE file are for informational purposes
+          only and do not modify the License. You may add Your own
+          attribution notices within Derivative Works that You distribute,
+          alongside or as an addendum to the NOTICE text from the Work,
+          provided that such additional attribution notices cannot be
+          construed as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions for
+      use, reproduction, or distribution of Your modifications, or for any
+      such Derivative Works as a whole, provided Your use, reproduction,
+      and distribution of the Work otherwise complies with the conditions
+      stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing
+      the origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor has
+      been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer, and
+      charge a fee for, acceptance of support, warranty, indemnity, or
+      other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Zenhosta
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,389 @@
+![9Drive cover](https://i.ibb.co.com/35BySv1C/image.png)
+
+# 9Drive — Virtual Cloud Storage & Client-Side Productivity Suite
+
+[![Version](https://img.shields.io/badge/version-1.0.0-blue.svg)](package.json)
+[![License](https://img.shields.io/badge/license-Apache%202.0-green.svg)](LICENSE)
+[![Framework](https://img.shields.io/badge/stack-React%20%7C%20Node%20Express%20%7C%20Prisma%20%7C%20MySQL-orange.svg)]()
+
+**9Drive** adalah platform virtual cloud storage gateway modern yang menggabungkan banyak akun **Google Drive** dan **S3-Compatible Storage** (Cloudflare R2, MinIO, Wasabi, AWS S3, Backblaze B2) ke dalam satu dashboard terpadu bergaya **Google Drive Material Design 3 (MD3)**. 
+
+Dilengkapi dengan **High-Performance CDN Media Gateway**, **External Upload API**, serta **Client-Side Productivity Tools Suite** lengkap (alat olah PDF, AI Hapus Background Gambar, Ekstraksi Audio Video, dan Utilitas Data) yang berjalan 100% di browser secara aman, cepat, dan terintegrasi langsung dengan penyimpanan Drive Anda.
+
+---
+
+## 🌟 Fitur Utama & Pembaruan Terkini
+
+Repositori ini telah disesuaikan dan dikembangkan dengan penambahan serangkaian fitur produktivitas mutakhir:
+
+### 1. 🎨 Antarmuka Google Drive Material Design 3 (MD3)
+- **Tampilan Otentik Google Drive**: Navigasi sidebar dengan indikator pill aktif, floating search bar, breadcrumbs folder dinamis, surface elevation, dan palet warna resmi Google Drive (`#0B57D0`, background neutral, rounded cards).
+- **Drive Account Selector Terpadu**: Dropdown pemilih akun Drive langsung di navbar untuk memfilter tampilan berkas berdasarkan akun Google Drive tertentu atau menampilkan semua akun sekaligus.
+- **Global Search Bar Cerdas**: Pencarian instan berkas dan folder dilengkapi filter cepat berdasarkan tipe berkas (Dokumen, Gambar, Video, PDF, ZIP), rentang tanggal modifikasi, dan akun penyimpanan.
+- **Sistem Notifikasi Floating Toast (`ToastContext`)**: Notifikasi mengambang yang responsif dan interaktif untuk memberikan konfirmasi aksi (unggah, hapus, salin tautan, mutasi berkas) tanpa mengganggu alur kerja pengguna.
+- **Menu Konteks Klik Kanan Lengkap (*Right-Click Context Menu*)**:
+  - **Menu Berkas**: Buka di Tools Suite, Salin Tautan CDN, Pratinjau, Unduh, Ganti Nama, Pindahkan, Bagikan, Berbintang (Star), Laci Detail, Hapus ke Sampah.
+  - **Menu Folder**: Buka Folder, Bagikan, Ganti Nama, Pindahkan, Info Detail, Hapus.
+  - **Menu Ruang Kosong (*Canvas Area*)**: Klik kanan pada area kosong untuk langsung mengunggah berkas, mengunggah folder, atau membuat folder baru.
+- **Laci Detail Berkas (*File Details Drawer*)**:
+  - Menampilkan pratinjau thumbnail visual, metadata teknis (ukuran berkas, tipe MIME, lokasi folder, tanggal pembuatan/modifikasi, akun pemilik).
+  - Tombol aksi instan untuk membuka berkas langsung ke dalam modul **Tools Suite** (PDF Tools, Image Tools, Remove BG) atau menyalin tautan publik CDN.
+
+---
+
+### 2. 🛠️ Productivity & Tools Suite (100% Client-Side & Privasi Terjaga)
+Pusat alat pengolah dokumen dan multimedia yang berjalan sepenuhnya di browser client (tanpa membebani CPU server atau mengirim berkas pribadi ke pihak ketiga):
+
+#### 📄 PDF Suite (`/tools/pdf`)
+- **Merge PDF**: Menggabungkan beberapa berkas PDF menjadi satu dokumen berurutan sesuai susunan yang ditentukan.
+- **Split PDF**: Memecah halaman PDF atau mengekstrak rentang halaman tertentu menjadi berkas tersendiri.
+- **Compress PDF**: Mengurangi ukuran dokumen PDF agar hemat penyimpanan dan cepat dibagikan tanpa merusak keterbacaan teks.
+- **JPG ke PDF**: Mengonversi dan merangkai sekumpulan foto (JPG, PNG, WebP) menjadi satu berkas album PDF yang rapi.
+- **PDF ke Gambar (JPG/PNG)**: Mengekstrak setiap lembar halaman dokumen PDF menjadi berkas gambar resolusi tinggi dengan pratinjau instan.
+- **Rotate PDF**: Memutar orientasi lembar dokumen PDF yang terbalik (90°, 180°, 270°) secara serentak.
+- **Watermark PDF**: Membubuhkan stempel teks hak cipta atau tanda keamanan kustom (contoh: *RAHASIA*, *DRAFT*) pada lembar PDF.
+
+#### 🖼️ AI & Image Suite (`/tools/image` & `/tools/remove-bg`)
+- **Hapus Background AI (`/tools/remove-bg`)**:
+  - Menghapus latar belakang foto manusia atau produk secara otomatis dan instan menggunakan model AI langsung di browser (`@imgly/background-removal`).
+  - Dilengkapi slider perbandingan **Before/After** interaktif.
+  - Opsi penggantian background kustom: transparan (PNG), palet warna solid, atau latar belakang gambar kustom.
+- **Kompres Gambar**: Mengecilkan ukuran foto JPG, PNG, dan WebP hingga 80% dengan kualitas visual optimal.
+- **Potong Foto / Pas Foto**: Pemotongan gambar dengan preset rasio resmi (Pas Foto 3:4, 4:6, Persegi 1:1, atau rasio bebas).
+- **Konversi Format Gambar**: Konversi format berkas secara batch antara WebP, PNG, dan JPG.
+- **Ubah Ukuran (Resize)**: Menyesuaikan dimensi piksel atau persentase skala dengan pengunci rasio aspek (*aspect-ratio lock*).
+- **Watermark Foto**: Menambahkan cap teks hak cipta pada posisi tengah atau sudut berkas secara batch.
+
+#### 🎬 Video & Audio Suite (`/tools/video`)
+- **Ekstrak Audio Video**: Mengambil dan mengubah suara dari video (MP4, WebM, MOV) menjadi berkas audio jernih (`.wav`) langsung di browser.
+
+#### 📊 Utilitas Data & Berkas (`/tools/data`)
+- **CSV ⇄ JSON Converter**: Konversi dua arah data tabel CSV dan format JSON secara instan dengan auto-formatting rapi.
+- **File Hash & Checksum**: Menghitung sidik jari digital (SHA-256) berkas untuk memverifikasi keaslian dan integritas dokumen.
+- **Base64 Encoder / Decoder**: Mengubah berkas atau gambar menjadi teks kode data Base64 untuk kebutuhan embedding web atau konfigurasi.
+
+#### 🔄 Integrasi Seamless dengan 9Drive
+- **Drive File Picker Modal**: Ambil berkas langsung dari folder 9Drive untuk langsung diproses di dalam tools tanpa perlu mengunduh ke komputer lokal terlebih dahulu.
+- **Save Destination Modal**: Simpan hasil olahan tools langsung kembali ke folder 9Drive yang dipilih, atau unduh ke perangkat lokal sebagai file tunggal maupun arsip ZIP otomatis.
+
+---
+
+### 3. ⚡ High-Performance CDN Media Gateway (`/cdn`)
+Gerbang pengiriman media berkinerja tinggi untuk kebutuhan embedding gambar, video, dan berkas statis:
+- **Tautan Streaming & Pratinjau Publik**:
+  - `GET /cdn/view/:id`: Pengiriman berkas dengan header `inline` disposition. Sangat optimal untuk tag HTML `<img>`, `<video>`, audio player, maupun pratinjau dokumen di web eksternal.
+  - `GET /cdn/raw/:id`: Pengiriman berkas dengan header `attachment` untuk unduhan langsung.
+- **Dukungan HTTP 206 Partial Content (Range Requests)**: Memungkinkan penonton video atau pendengar audio melakukan seeking/scrubbing timeline tanpa harus mengunduh keseluruhan berkas.
+- **Mekanisme Caching Agresif**: Mendukung header `ETag`, `Last-Modified`, validasi `If-None-Match` (HTTP 304 Not Modified), serta `Cache-Control: public, max-age=31536000, immutable` untuk menghemat bandwidth server.
+- **Dynamic Open CORS**: Mengizinkan akses lintas domain (`*`) khusus untuk jalur `/cdn`, `/api`, dan `/public`.
+- **One-Click CDN Link & Embed Modal**: Generator kode siap pakai di antarmuka (Direct URL, Tag HTML `<img>`, dan sintaks Markdown).
+
+---
+
+### 4. 🔌 External Upload API & Developer Hub (`/api`)
+- **Manajemen API Key Terpadu (`/api`)**:
+  - Pembuatan API Key aman dengan hashing token (SHA-256) di database dan tampilan rahasia satu kali (*one-time secret modal*).
+  - Pembatasan izin akses (*scope permissions*, misalnya `files:upload`).
+  - Pemantauan waktu penggunaan terakhir (*last-used tracking*) dan pencabutan kunci (*revocation*).
+- **Endpoint Unggah Publik**: `POST /api/v1/uploads` dengan otentikasi header `X-API-Key` atau `Authorization: Bearer <API_KEY>`.
+- **Dokumentasi SDK Interaktif In-App**: Contoh kode siap pakai untuk cURL, Node.js (fetch & axios), Python, PHP, dan Bash testing script bawaan (`test-external-upload.ts`).
+- **Target Folder & Routing Fleksibel**: Berkas eksternal dapat diarahkan langsung ke ID folder virtual tertentu serta mengikuti kebijakan alokasi akun penyimpanan yang aktif.
+
+---
+
+### 5. ☁️ Multi-Account & Storage Gateway
+- **Multi-Account Google Drive**: Hubungkan beberapa akun Google Drive dalam satu akun 9Drive untuk menggabungkan total kapasitas penyimpanan cloud.
+- **S3-Compatible Storage Gateway**: Mendukung integrasi MinIO, Cloudflare R2, Wasabi, Backblaze B2, dan AWS S3.
+- **Upload Routing Policies**: Kebijakan alokasi unggahan cerdas:
+  - *Most-Available*: Mengunggah ke akun dengan sisa kuota terbesar.
+  - *Round-Robin*: Distribusi bergantian secara merata antar akun.
+  - *Priority-Order*: Memenuhi akun utama terlebih dahulu sebelum beralih ke akun sekunder.
+- **Direct Stream Upload**: Berkas dialirkan langsung (*piped stream*) dari pengguna ke Google Drive / S3 storage gateway tanpa pernah disimpan di disk lokal server.
+- **Quota Tracker**: Visualisasi pemakaian penyimpanan, persentase kuota, dan breakdown kapasitas per akun.
+
+---
+
+### 6. 🔗 Smart Sharing & Permission System
+- **Dialog Berbagi Interaktif (`ShareModal`)**:
+  - Konfigurasi izin akses: *Restricted* (hanya akun tertentu) atau *Anyone with the link* (publik).
+  - Penentuan hak akses: *Viewer*, *Commenter*, dan *Editor*.
+- **Deteksi Izin Warisan (*Inherited Permission Origin*)**: Secara otomatis mendeteksi jika suatu berkas mewarisi status publik dari folder induknya, serta menyediakan opsi langsung untuk mengatur izin folder asalnya.
+- **Halaman Berbagi (`/shared`)**: Tampilan tab terpisah untuk berkas yang dibagikan kepada Anda (*Shared with me*) dan berkas yang Anda bagikan ke orang lain (*Shared by me*).
+- **Halaman Berbintang (`/starred`) & Sampah (`/trash`)**: Manajemen berkas favorit yang terhubung ke Google Drive API, serta pemulihan atau penghapusan permanen dari tempat sampah.
+
+---
+
+### 7. ⚙️ Manajemen Konfigurasi & Pembaruan Sistem
+- **Konfigurasi Google OAuth via UI**: Input Google Client ID, Client Secret, dan Redirect URI langsung melalui halaman **Settings -> Google Credentials** di dashboard tanpa wajib menjalankan seed manual terminal. Kredensial dienkripsi aman (AES-256) di database MySQL.
+- **Automated In-App Updates (PM2)**: Menu pembaruan sistem sekali klik di UI Settings yang menjalankan git pull, migrasi Prisma, build aset, dan restart layanan backend otomatis dengan monitor log langsung.
+- **Monorepo Dev Runner**: Satu perintah di root workspace untuk menjalankan frontend dan backend secara bersamaan.
+
+---
+
+## 📁 Struktur Direktori Repositori
+
+```txt
+9drive/
+├── backend/                  # API Server (Express + TypeScript + Prisma)
+│   ├── prisma/               # Skema database & file migrasi MySQL
+│   └── src/
+│       ├── config/           # Konfigurasi env & Prisma client
+│       ├── middleware/       # Otentikasi JWT, API Key, dan error handler
+│       ├── modules/
+│       │   ├── api-keys/     # Pengelolaan API Key developer
+│       │   ├── audit-logs/   # Pencatatan riwayat aktivitas pengguna
+│       │   ├── auth/         # Registrasi, login, dan refresh token
+│       │   ├── cdn/          # High-performance CDN media streaming gateway
+│       │   ├── connected-accounts/ # Manajemen multi-akun Google Drive
+│       │   ├── files/        # Manipulasi berkas, streaming, dan preview
+│       │   ├── folders/      # Virtual folder tree management
+│       │   ├── google/       # Integrasi Google Drive API & OAuth
+│       │   ├── public-api/   # Endpoint REST API publik (/api/v1/uploads)
+│       │   ├── storage/      # Ringkasan kuota dan manajemen penyimpanan
+│       │   ├── system/       # Updater otomatis & status sistem
+│       │   └── uploads/      # Multi-part upload streaming engine
+│       └── scripts/          # Script pengujian upload eksternal & seeding
+│
+├── frontend/                 # Aplikasi Web Client (React 18 + Vite + Tailwind/MD3)
+│   └── src/
+│       ├── components/
+│       │   ├── drive/        # UI Google Drive MD3 (FileGrid, ContextMenu, Drawer, ShareModal, dll)
+│       │   ├── tools/        # UI Tools Suite (Picker, BeforeAfterPreview, SaveDestination, Icons)
+│       │   └── ui/           # Komponen atomik UI (Buttons, Inputs, Dialogs, Cards)
+│       ├── context/          # State context (DriveFilter, UploadManager, ToastNotification)
+│       ├── layouts/          # Layout utama Drive (Sidebar, Header, Main Content Area)
+│       ├── lib/tools/        # Core engine tools (PDF, Image, Video-to-audio, Background removal AI)
+│       └── pages/
+│           ├── tools/        # Halaman Tools Hub, PDF View, Image View, Video View, Data View, RemoveBG
+│           ├── AllFilesPage.tsx
+│           ├── ApiManagementPage.tsx
+│           ├── QuotaTrackerPage.tsx
+│           ├── SettingsPage.tsx
+│           ├── SharedPage.tsx
+│           ├── StarredPage.tsx
+│           └── TrashPage.tsx
+│
+├── setup.ps1                 # Script setup otomatis untuk Windows PowerShell
+├── setup.sh                  # Script setup otomatis untuk Linux/macOS
+├── docker-compose.yml        # Orchestration Docker (MySQL + Backend + Frontend)
+└── package.json              # Monorepo root dev runner (concurrently)
+```
+
+---
+
+## 💻 Prasyarat Sistem
+
+- **Node.js**: Versi 20 LTS atau lebih baru
+- **NPM**: Versi 10+
+- **MySQL**: Versi 8.0+ berjalan secara lokal atau via Docker
+- **Google Cloud Project**:
+  - Mengaktifkan **Google Drive API**
+  - Mengonfigurasi **OAuth Consent Screen**
+  - Membuat **OAuth 2.0 Client ID** (Web Application)
+
+Default basis data MySQL yang digunakan pada development lokal:
+```txt
+Host:     localhost
+Port:     3306
+Database: 9drive
+User:     root
+Password: (kosong / sesuaikan dengan konfigurasi MySQL Anda)
+```
+
+---
+
+## 🚀 Panduan Instalasi & Menjalankan Proyek
+
+### Cara 1: Setup Otomatis Menggunakan Script (Direkomendasikan)
+
+Script setup akan secara otomatis memasang seluruh dependensi backend dan frontend, membuat berkas `.env` dengan token acak yang aman, serta membuat skema database Prisma.
+
+#### Windows (PowerShell)
+Buka PowerShell di direktori `9drive`:
+```powershell
+powershell -ExecutionPolicy Bypass -File .\setup.ps1
+```
+
+#### Linux / macOS
+Buka Terminal di direktori `9drive`:
+```bash
+chmod +x ./setup.sh
+./setup.sh
+```
+
+---
+
+### Cara 2: Setup Manual & Menjalankan Monorepo
+
+#### 1. Pasang Dependensi
+Dari direktori root proyek `9drive`:
+```bash
+# Pasang dependensi monorepo runner
+npm install
+
+# Pasang dependensi backend dan frontend
+npm run install:all
+```
+
+#### 2. Buat Basis Data MySQL
+Pastikan server MySQL Anda telah aktif, lalu buat basis data:
+```sql
+CREATE DATABASE IF NOT EXISTS 9drive;
+```
+
+#### 3. Konfigurasi Berkas Environment
+Salin konfigurasi default atau buat berkas `backend/.env`:
+```env
+DATABASE_URL="mysql://root@localhost:3306/9drive"
+APP_PORT=4000
+FRONTEND_URL="http://localhost:5173"
+JWT_ACCESS_SECRET="ganti-dengan-secret-jwt-acak-minimal-32-karakter"
+TOKEN_ENCRYPTION_KEY="kunci-enkripsi-tepat-32-karakter-key!"
+ACCESS_TOKEN_TTL_SECONDS=900
+REFRESH_TOKEN_TTL_DAYS=30
+MAX_UPLOAD_BYTES=5368709120
+RECAPTCHA_SECRET_KEY=""
+
+# (Opsional) Kredensial Google OAuth juga dapat diisi langsung via UI Settings
+GOOGLE_CLIENT_ID=""
+GOOGLE_CLIENT_SECRET=""
+GOOGLE_REDIRECT_URI="http://localhost:4000/connected-accounts/google/callback"
+```
+
+Buat berkas `frontend/.env`:
+```env
+VITE_API_URL=http://localhost:4000
+VITE_RECAPTCHA_SITE_KEY=
+```
+
+#### 4. Jalankan Migrasi Database Prisma
+```bash
+cd backend
+npm run prisma:migrate
+cd ..
+```
+
+#### 5. Jalankan Development Server (Monorepo)
+Jalankan satu perintah di folder root `9drive` untuk memulai backend dan frontend secara bersamaan:
+```bash
+npm run dev
+```
+
+Aplikasi dapat langsung diakses pada:
+- **Frontend Dashboard**: [http://localhost:5173](http://localhost:5173)
+- **Backend API & CDN**: [http://localhost:4000](http://localhost:4000)
+
+*(Opsional jika ingin menjalankan terpisah: `npm run dev:backend` dan `npm run dev:frontend`)*
+
+---
+
+### Cara 3: Menjalankan Menggunakan Docker Compose
+
+1. Siapkan berkas `.env` dari template Docker:
+   ```bash
+   cp .env.docker.example .env
+   ```
+2. Sesuaikan konfigurasi di `.env` (isi password MySQL, kredensial Google, dan secret token).
+3. Bangun dan jalankan seluruh container:
+   ```bash
+   docker compose up -d --build
+   ```
+4. Layanan akan berjalan pada:
+   - Frontend: `http://localhost:5173`
+   - Backend: `http://localhost:4000`
+   - MySQL: `localhost:3306`
+
+---
+
+## 🌐 Konfigurasi Google Cloud Console
+
+1. Buka [Google Cloud Console](https://console.cloud.google.com/).
+2. Buat atau pilih proyek Google Cloud Anda.
+3. Buka **APIs & Services** -> **Library**, cari **Google Drive API**, lalu klik **Enable**.
+4. Buka **APIs & Services** -> **OAuth consent screen**:
+   - Pilih jenis pengguna: **External**.
+   - Masukkan nama aplikasi dan email dukungan pengembang.
+   - Tambahkan scopes berikut:
+     ```txt
+     https://www.googleapis.com/auth/drive
+     https://www.googleapis.com/auth/userinfo.email
+     https://www.googleapis.com/auth/userinfo.profile
+     ```
+   - Di bagian **Test users**, tambahkan alamat email Google yang akan digunakan untuk pengujian aplikasi.
+5. Buka **APIs & Services** -> **Credentials**:
+   - Klik **Create Credentials** -> **OAuth client ID**.
+   - Pilih tipe: **Web application**.
+   - **Authorized JavaScript origins**:
+     ```txt
+     http://localhost:5173
+     ```
+   - **Authorized redirect URIs**:
+     ```txt
+     http://localhost:4000/connected-accounts/google/callback
+     ```
+   - Simpan dan salin **Client ID** serta **Client Secret**.
+6. Simpan kredensial tersebut ke dalam aplikasi melalui menu **Settings** -> **Google Credentials** pada dashboard 9Drive.
+
+---
+
+## 📡 Ringkasan Endpoint API
+
+### Otentikasi & Akun
+- `POST /auth/register` — Pendaftaran akun pengguna baru
+- `POST /auth/login` — Masuk dengan email & kata sandi
+- `GET /auth/google/url` — Inisiasi login cepat via Google
+- `POST /auth/google/exchange` — Pertukaran kode otentikasi Google
+- `POST /auth/refresh` — Memperbarui token akses JWT
+- `GET /auth/me` — Mendapatkan profil pengguna saat ini
+
+### CDN Media Streaming
+- `GET /cdn/view/:id` — Streaming media publik inline (untuk tag `<img>`, video player, dll)
+- `GET /cdn/raw/:id` — Unduhan langsung berkas publik (attachment disposition)
+- `GET /cdn/:id` — Redirect otomatis ke endpoint view
+
+### Developer Public API
+- `POST /api/v1/uploads` — Mengunggah berkas menggunakan API Key (`X-API-Key`)
+
+### Manajemen Berkas & Folder
+- `GET /files` — Mendapatkan daftar berkas (mendukung parameter `folderId`, `q`, `mimeType`, `accountId`)
+- `POST /uploads` — Mengunggah berkas ke Drive/S3 via dashboard (multipart streaming)
+- `PATCH /files/:id` — Mengubah nama atau metadata berkas
+- `DELETE /files/:id` — Memindahkan berkas ke sampah atau menghapus permanen
+- `POST /files/:id/share` — Membuat tautan berbagi publik
+- `GET /folders` — Mendapatkan susunan pohon folder virtual
+- `POST /folders` — Membuat folder virtual baru
+
+### Penyimpanan & Akun Terhubung
+- `GET /connected-accounts` — Daftar akun Google Drive & S3 yang terhubung
+- `GET /storage/summary` — Statistik agregasi total kuota dan penggunaan penyimpanan
+- `POST /connected-accounts/:id/sync-quota` — Sinkronisasi ulang kuota dari Google Drive
+
+---
+
+## 🔒 Catatan Keamanan
+
+1. **Keamanan Streaming**: Berkas unggahan dialirkan langsung (*piped stream*) dari antarmuka ke cloud provider target. Server backend tidak pernah menyimpan salinan berkas di disk lokal.
+2. **Enkripsi Kredensial**: Token akses OAuth, refresh token Google, dan API secret disimpan dalam database MySQL menggunakan enkripsi AES-256 (`TOKEN_ENCRYPTION_KEY`).
+3. **Penyimpanan Token Sesi**: Hash SHA-256 digunakan untuk menyimpan token refresh dan API Key, mencegah kebocoran kredensial mentah saat terjadi database dump.
+4. **Isolasi Lingkungan**: Berkas `.env` telah didaftarkan dalam `.gitignore` dan tidak boleh di-commit ke repositori publik.
+
+---
+
+## 🛠️ Build untuk Produksi
+
+Untuk menghasilkan bundle produksi:
+
+```bash
+# Build frontend dan backend secara bersamaan
+npm run build
+```
+
+Bundle produksi yang dihasilkan:
+- **Backend**: Berada di `backend/dist` (dijalankan dengan `node dist/server.js`)
+- **Frontend**: Berada di `frontend/dist` (dapat disajikan via Nginx atau static file server)
+
+---
+
+## 📄 Lisensi
+
+Didistribusikan di bawah lisensi Apache 2.0. Lihat berkas [LICENSE](LICENSE) untuk informasi lisensi selengkapnya.