@interocitor/core 0.0.0-beta.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 The UI Team
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,178 @@
+<p align="center">
+  <a href="https://github.com/TheUiTeam/interocitor">
+    <img src="https://raw.githubusercontent.com/TheUiTeam/interocitor/main/docs/assets/hero.svg" alt="interocitor" width="560"/>
+  </a>
+</p>
+
+<p align="center">
+  <strong>The JavaScript mailbox that can't read your mail.</strong>
+</p>
+
+# interocitor
+
+Encrypted local-first CRDT sync for browser apps.
+
+## Why
+
+Interocitor is your app's __personal keychain__.
+Your devices hold the key. The cloud is only a mailbox. It carries encrypted sync artifacts and cannot read your mail.
+
+What this means:
+- encryption on by default
+- reads and writes are local-first
+- sync uses a remote mailbox, not a trusted database
+- restore is explicit app UI, not automatic magic
+
+## Quick start
+
+```ts
+import { SyncEngine, createRowId } from 'interocitor';
+import { WebDAVAdapter } from 'interocitor/adapters/webdav';
+
+const adapter = new WebDAVAdapter({
+  baseUrl: 'https://your-webdav-server.example.com',
+  auth: { username: 'user', password: 'pass' },
+});
+
+const engine = new SyncEngine(adapter, {
+  remotePath: '/MyApp',
+  dbName: 'my-app',
+  appName: 'My App',
+  // encrypted by default; set encrypted: false to opt out
+});
+
+await engine.init();
+await engine.connect();
+
+const id = createRowId({ prefix: 'todo' });
+await engine.put('todos', id, {
+  text: 'Ship privacy-first sync',
+  done: false,
+});
+```
+
+## How sync works
+
+```mermaid
+flowchart LR
+  A[Browser app] --> B[Interocitor engine]
+  B --> C[Local store]
+  B --> D[Encrypt changes locally]
+  D --> E[Adapter]
+  E --> F[Remote mailbox\n(ciphertext only)]
+  F --> E
+  E --> G[Download ciphertext]
+  G --> H[Decrypt locally]
+  H --> B
+```
+
+## Core API at a glance
+
+```ts
+await engine.init();
+await engine.connect();
+await engine.put(table, id, data);
+await engine.get(table, id);
+await engine.query(table);
+await engine.sync();
+
+await engine.secureWithBiometrics();   // optional, explicit keychain enrollment
+await engine.restoreWithBiometrics();  // explicit recovery flow
+```
+
+## Row IDs
+
+Use stable string IDs for synced rows. Do not use auto-increment IDs.
+
+Good default:
+
+```ts
+import { createRowId } from 'interocitor';
+
+const id = createRowId({ prefix: 'task' });
+```
+
+`createRowId()` uses platform crypto. No extra dependency needed.
+
+## Offline guarantee
+
+Every read and write hits the local store. No network required.
+`sync()` is the only call that touches the remote mailbox.
+
+| Operation | Network? |
+| --- | --- |
+| `init()` | No |
+| `put()` | No |
+| `delete()` | No |
+| `get()` / `query()` | No |
+| `sync()` | Yes, if adapter configured |
+
+## Adapters
+
+### Google Drive
+For zero new backend infrastructure where Google Drive is acceptable as the encrypted mailbox.
+
+### WebDAV
+For self-hosted sync, local demos, and inspectable remote artifacts.
+
+### Cloudflare (experimental)
+For Interocitor-native transport flows with invalidation fanout and maintenance endpoints while keeping decryption client-side.
+
+### Memory
+For tests and adapter-contract validation.
+
+## Local store
+
+Interocitor is a sync engine, not a database. The local store is a pluggable abstraction (`LocalStoreAdapter`). The browser default uses IndexedDB. The Swift package uses SQLite. You don't need to care which — reads, writes, and queries go through the engine API.
+
+## CRDT strategy
+
+Interocitor uses per-column CRDTs with hybrid logical clocks (HLC). All merge happens on the client. Remote storage is just a byte pipe.
+
+Conflict default: `'remote-wins'`.
+Override at database, table, or field level.
+
+## Events
+
+```ts
+engine.on('change', (event) => {
+  console.log(event.type, event.table, event.id);
+});
+```
+
+## Local TODO demo (WebDAV)
+
+From the monorepo root:
+
+```bash
+yarn demo:todo
+```
+
+## What this is not
+
+- not Firebase
+- not Fireproof
+- not PowerSync
+- not Replicache
+- not a hosted backend
+- not a query engine over the cloud
+- not a server-trusted merge layer
+
+## Tests
+
+From the monorepo root:
+
+```bash
+yarn workspace interocitor test
+```
+
+## Package context
+
+This package is the main JavaScript/TypeScript runtime in the monorepo. See also:
+- root `README.md` — monorepo overview
+- `packages/interocitor-swift` — Swift client
+- `examples/todo-webdav` — local demo app
+
+## License
+
+MIT

package/dist/adapters/cloudflare.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Cloudflare Worker + D1 Storage Adapter (Interocitor-native protocol)
+ *
+ * This adapter is a perfect-fit backend for Interocitor only.
+ * It does NOT parse XML and does NOT depend on WebDAV compatibility.
+ *
+ * Base URL shape:
+ *   https://<worker>/io/<prefix>
+ *
+ * The adapter derives:
+ *   wss://<worker>/notify/<prefix>  (WebSocket invalidations via InterocitorRelay DO)
+ */
+import type { StorageAdapter, FileEntry } from '../core/types.ts';
+export interface CloudflareAdapterConfig {
+    /** Worker IO base URL that includes prefix, e.g. https://worker/io/team-a */
+    baseUrl: string;
+    /** Optional bearer for server/cost protection (INTEROCITOR_ACCESS_TOKEN). */
+    token?: string;
+}
+/**
+ * Interocitor-native Cloudflare adapter for Worker + D1 based deployments.
+ *
+ * Use this when you want a purpose-fit backend with optional WebSocket-driven
+ * invalidation instead of a generic file protocol like WebDAV.
+ *
+ * @example
+ * ```ts
+ * const adapter = new CloudflareAdapter({
+ *   baseUrl: 'https://example.com/io/team-a',
+ *   token: 'optional-bearer-token',
+ * });
+ * ```
+ */
+/** Config shape embedded in QR payloads for CloudflareAdapter. Credentials excluded. */
+export interface CloudflareHandshakeConfig {
+    /** Worker IO base URL including the /io/<prefix> path segment. */
+    baseUrl: string;
+}
+export declare class CloudflareAdapter implements StorageAdapter {
+    readonly name = "cloudflare";
+    private readonly config;
+    private authenticated;
+    constructor(config: CloudflareAdapterConfig);
+    private headers;
+    private get ioBaseUrl();
+    private get notifyUrl();
+    private ioUrl;
+    private fileUrl;
+    authenticate(): Promise<void>;
+    /**
+     * Returns the worker base URL (without credentials) for embedding in a QR payload.
+     * The scanner uses this to point their CloudflareAdapter at the same worker shard.
+     */
+    getHandshakeConfig(): string;
+    isAuthenticated(): boolean;
+    subscribeToInvalidations(onInvalidate: (payload: {
+        type: string;
+        path: string;
+        ts: number;
+    }) => void, hooks?: {
+        onReady?: () => void;
+        onError?: () => void;
+    }): () => void;
+    ensureFolder(path: string): Promise<void>;
+    listFiles(path: string): Promise<FileEntry[]>;
+    listFolders(path: string): Promise<string[]>;
+    readFile(path: string): Promise<Uint8Array>;
+    writeFile(path: string, data: Uint8Array | string): Promise<void>;
+    deleteFile(path: string): Promise<void>;
+    getFileMetadata(path: string): Promise<FileEntry | null>;
+}
+//# sourceMappingURL=cloudflare.d.ts.map

package/dist/adapters/cloudflare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElE,MAAM,WAAW,uBAAuB;IACtC,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAUD;;;;;;;;;;;;;GAaG;AACH,wFAAwF;AACxF,MAAM,WAAW,yBAAyB;IACxC,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,iBAAkB,YAAW,cAAc;IACtD,QAAQ,CAAC,IAAI,gBAAgB;IAE7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,aAAa,CAAS;gBAElB,MAAM,EAAE,uBAAuB;IAI3C,OAAO,CAAC,OAAO;IAQf,OAAO,KAAK,SAAS,GAMpB;IAED,OAAO,KAAK,SAAS,GAWpB;IAED,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,OAAO;IAMT,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBnC;;;OAGG;IACH,kBAAkB,IAAI,MAAM;IAK5B,eAAe,IAAI,OAAO;IAI1B,wBAAwB,CACtB,YAAY,EAAE,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,EAC3E,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,GACrD,MAAM,IAAI;IAwDP,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAqB7C,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAe5C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAa3C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcjE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;CAsB/D"}

package/dist/adapters/cloudflare.js

@@ -0,0 +1,227 @@
+/**
+ * Cloudflare Worker + D1 Storage Adapter (Interocitor-native protocol)
+ *
+ * This adapter is a perfect-fit backend for Interocitor only.
+ * It does NOT parse XML and does NOT depend on WebDAV compatibility.
+ *
+ * Base URL shape:
+ *   https://<worker>/io/<prefix>
+ *
+ * The adapter derives:
+ *   wss://<worker>/notify/<prefix>  (WebSocket invalidations via InterocitorRelay DO)
+ */
+export class CloudflareAdapter {
+    constructor(config) {
+        this.name = 'cloudflare';
+        this.authenticated = false;
+        this.config = { ...config, baseUrl: config.baseUrl.replace(/\/$/, '') };
+    }
+    headers(extra) {
+        const base = {};
+        if (this.config.token) {
+            base.Authorization = `Bearer ${this.config.token}`;
+        }
+        return { ...base, ...extra };
+    }
+    get ioBaseUrl() {
+        const u = new URL(this.config.baseUrl);
+        if (!u.pathname.includes('/io/')) {
+            throw new Error('CloudflareAdapter baseUrl must include /io/<prefix>');
+        }
+        return u.toString().replace(/\/$/, '');
+    }
+    get notifyUrl() {
+        const u = new URL(this.config.baseUrl);
+        if (!u.pathname.includes('/io/')) {
+            throw new Error('CloudflareAdapter baseUrl must include /io/<prefix>');
+        }
+        u.pathname = u.pathname.replace('/io/', '/notify/');
+        u.protocol = u.protocol === 'https:' ? 'wss:' : 'ws:';
+        if (this.config.token) {
+            u.searchParams.set('access_token', this.config.token);
+        }
+        return u.toString().replace(/\/$/, '');
+    }
+    ioUrl(pathname) {
+        const clean = pathname.startsWith('/') ? pathname : `/${pathname}`;
+        return `${this.ioBaseUrl}${clean}`;
+    }
+    fileUrl(path) {
+        const u = new URL(this.ioUrl('/file'));
+        u.searchParams.set('path', path);
+        return u.toString();
+    }
+    async authenticate() {
+        const res = await fetch(this.ioUrl('/health'), {
+            method: 'GET',
+            headers: this.headers(),
+        });
+        if (res.ok) {
+            this.authenticated = true;
+            return;
+        }
+        if (res.status === 401 || res.status === 403) {
+            throw new Error('Cloudflare Worker auth failed — check your access token');
+        }
+        throw new Error(`Cloudflare Worker unreachable: HTTP ${res.status}`);
+    }
+    /**
+     * Returns the worker base URL (without credentials) for embedding in a QR payload.
+     * The scanner uses this to point their CloudflareAdapter at the same worker shard.
+     */
+    getHandshakeConfig() {
+        const cfg = { baseUrl: this.config.baseUrl };
+        return JSON.stringify(cfg);
+    }
+    isAuthenticated() {
+        return this.authenticated;
+    }
+    subscribeToInvalidations(onInvalidate, hooks) {
+        let ws = null;
+        let cancelled = false;
+        let backoffMs = 1000;
+        const MAX_BACKOFF_MS = 30000;
+        const connect = () => {
+            if (cancelled)
+                return;
+            try {
+                ws = new WebSocket(this.notifyUrl);
+            }
+            catch {
+                hooks?.onError?.();
+                scheduleReconnect();
+                return;
+            }
+            ws.onopen = () => {
+                backoffMs = 1000;
+                hooks?.onReady?.();
+            };
+            ws.onmessage = (e) => {
+                try {
+                    const msg = JSON.parse(e.data);
+                    if (msg.type === 'invalidation' || msg.type === 'invalidate' || msg.type === 'compact') {
+                        onInvalidate(msg);
+                    }
+                }
+                catch {
+                    onInvalidate({ type: 'unknown', path: '/', ts: Date.now() });
+                }
+            };
+            ws.onerror = () => {
+                hooks?.onError?.();
+            };
+            ws.onclose = () => {
+                if (!cancelled)
+                    scheduleReconnect();
+            };
+        };
+        const scheduleReconnect = () => {
+            if (cancelled)
+                return;
+            setTimeout(() => connect(), backoffMs);
+            backoffMs = Math.min(backoffMs * 2, MAX_BACKOFF_MS);
+        };
+        connect();
+        return () => {
+            cancelled = true;
+            try {
+                ws?.close(1000, 'unsubscribed');
+            }
+            catch { }
+            ws = null;
+        };
+    }
+    async ensureFolder(path) {
+        const res = await fetch(this.ioUrl('/ensure-folder'), {
+            method: 'POST',
+            headers: this.headers({ 'Content-Type': 'application/json; charset=utf-8' }),
+            body: JSON.stringify({ path }),
+        });
+        if (!res.ok && res.status !== 405) {
+            throw new Error(`Failed to ensure folder ${path}: HTTP ${res.status}`);
+        }
+    }
+    async listFiles(path) {
+        const res = await fetch(this.ioUrl('/list-files'), {
+            method: 'POST',
+            headers: this.headers({ 'Content-Type': 'application/json; charset=utf-8' }),
+            body: JSON.stringify({ path }),
+        });
+        if (!res.ok) {
+            throw new Error(`Failed to list files for ${path}: HTTP ${res.status}`);
+        }
+        const payload = await res.json();
+        return (payload.files ?? []).map((f) => ({
+            name: f.name,
+            path: f.path,
+            size: f.size,
+            modifiedTime: f.modifiedTime,
+            etag: f.etag,
+        }));
+    }
+    async listFolders(path) {
+        const res = await fetch(this.ioUrl('/list-folders'), {
+            method: 'POST',
+            headers: this.headers({ 'Content-Type': 'application/json; charset=utf-8' }),
+            body: JSON.stringify({ path }),
+        });
+        if (!res.ok) {
+            throw new Error(`Failed to list folders for ${path}: HTTP ${res.status}`);
+        }
+        const payload = await res.json();
+        return payload.folders ?? [];
+    }
+    async readFile(path) {
+        const res = await fetch(this.fileUrl(path), {
+            method: 'GET',
+            headers: this.headers(),
+        });
+        if (!res.ok) {
+            throw new Error(`Failed to read ${path}: HTTP ${res.status}`);
+        }
+        return new Uint8Array(await res.arrayBuffer());
+    }
+    async writeFile(path, data) {
+        const bytes = typeof data === 'string' ? new TextEncoder().encode(data) : data;
+        const res = await fetch(this.fileUrl(path), {
+            method: 'PUT',
+            headers: this.headers({ 'Content-Type': 'application/octet-stream' }),
+            body: bytes,
+        });
+        if (!res.ok && res.status !== 201 && res.status !== 204) {
+            throw new Error(`Failed to write ${path}: HTTP ${res.status}`);
+        }
+    }
+    async deleteFile(path) {
+        const res = await fetch(this.fileUrl(path), {
+            method: 'DELETE',
+            headers: this.headers(),
+        });
+        if (!res.ok && res.status !== 404 && res.status !== 405) {
+            throw new Error(`Failed to delete ${path}: HTTP ${res.status}`);
+        }
+    }
+    async getFileMetadata(path) {
+        const res = await fetch(this.ioUrl('/metadata'), {
+            method: 'POST',
+            headers: this.headers({ 'Content-Type': 'application/json; charset=utf-8' }),
+            body: JSON.stringify({ path }),
+        });
+        if (res.status === 404)
+            return null;
+        if (!res.ok)
+            return null;
+        const payload = await res.json();
+        const f = payload.file;
+        if (!f)
+            return null;
+        return {
+            name: f.name,
+            path: f.path,
+            size: f.size,
+            modifiedTime: f.modifiedTime,
+            etag: f.etag,
+        };
+    }
+}
+//# sourceMappingURL=cloudflare.js.map

package/dist/adapters/cloudflare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuCH,MAAM,OAAO,iBAAiB;IAM5B,YAAY,MAA+B;QALlC,SAAI,GAAG,YAAY,CAAC;QAGrB,kBAAa,GAAG,KAAK,CAAC;QAG5B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IAEO,OAAO,CAAC,KAA8B;QAC5C,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,IAAY,SAAS;QACnB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAY,SAAS;QACnB,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,QAAgB;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnE,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;IACrC,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YAC7C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,MAAM,GAAG,GAA8B,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,wBAAwB,CACtB,YAA2E,EAC3E,KAAsD;QAEtD,IAAI,EAAE,GAAqB,IAAI,CAAC;QAChC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,MAAM,cAAc,GAAG,KAAM,CAAC;QAE9B,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,SAAS;gBAAE,OAAO;YACtB,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;gBACnB,iBAAiB,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;gBACf,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;YACrB,CAAC,CAAC;YAEF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;gBACjC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAc,CAA+C,CAAC;oBACvF,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvF,YAAY,CAAC,GAAG,CAAC,CAAC;oBACpB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC,CAAC;YAEF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;YACrB,CAAC,CAAC;YAEF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,CAAC,SAAS;oBAAE,iBAAiB,EAAE,CAAC;YACtC,CAAC,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,iBAAiB,GAAG,GAAG,EAAE;YAC7B,IAAI,SAAS;gBAAE,OAAO;YACtB,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;YACvC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;QACtD,CAAC,CAAC;QAEF,OAAO,EAAE,CAAC;QAEV,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACjD,EAAE,GAAG,IAAI,CAAC;QACZ,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC;YAC5E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC;YAC5E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAA8B,CAAC;QAC7D,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC;YAC5E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAA4B,CAAC;QAC3D,OAAO,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAyB;QACrD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE/E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;YACrE,IAAI,EAAE,KAA4B;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAC1C,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC;YAC5E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkC,CAAC;QACjE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpB,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/google-drive.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Google Drive Storage Adapter
+ *
+ * Uses Google Drive API v3 via OAuth2 with `drive.file` scope.
+ * The app can only see files it created or the user explicitly shared.
+ *
+ * Requires: Google API client ID from Google Cloud Console.
+ * Auth flow: Google Identity Services (GIS) popup or redirect.
+ */
+import type { StorageAdapter, FileEntry } from '../core/types.ts';
+interface GoogleDriveConfig {
+    clientId: string;
+    /** Redirect URI for OAuth (default: current origin) */
+    redirectUri?: string;
+}
+/**
+ * Google Drive adapter using the browser OAuth token flow.
+ *
+ * This is the easiest zero-infrastructure option when your users already live
+ * in Google Workspace or personal Drive.
+ *
+ * @example
+ * ```ts
+ * const adapter = new GoogleDriveAdapter({ clientId: 'YOUR_GOOGLE_CLIENT_ID' });
+ * const engine = new SyncEngine(adapter, { remotePath: '/MyApp' });
+ * ```
+ */
+export declare class GoogleDriveAdapter implements StorageAdapter {
+    readonly name = "google-drive";
+    private config;
+    private accessToken;
+    private fileIdCache;
+    private folderIdCache;
+    constructor(config: GoogleDriveConfig);
+    authenticate(): Promise<void>;
+    /** Set token directly (for apps that handle their own OAuth flow). */
+    setAccessToken(token: string): void;
+    /**
+     * Returns the Google OAuth clientId for embedding in a QR payload.
+     * The scanner uses this to configure their GoogleDriveAdapter.
+     * The OAuth flow (and resulting access token) is performed separately by the user.
+     */
+    getHandshakeConfig(): string;
+    isAuthenticated(): boolean;
+    private verifyToken;
+    private headers;
+    /**
+     * Resolve a path like "/Interocitor/changes/dev_abc.ndjson"
+     * to a Google Drive file ID by walking the folder tree.
+     */
+    private resolveFileId;
+    private resolveFolderId;
+    ensureFolder(path: string): Promise<void>;
+    listFiles(folderPath: string): Promise<FileEntry[]>;
+    listFolders(folderPath: string): Promise<string[]>;
+    readFile(path: string): Promise<Uint8Array>;
+    writeFile(path: string, data: Uint8Array | string): Promise<void>;
+    deleteFile(path: string): Promise<void>;
+    getFileMetadata(path: string): Promise<FileEntry | null>;
+    /** Clear caches (useful after compaction deletes files). */
+    clearCache(): void;
+}
+export {};
+//# sourceMappingURL=google-drive.d.ts.map

package/dist/adapters/google-drive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive.d.ts","sourceRoot":"","sources":["../../src/adapters/google-drive.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAMlE,UAAU,iBAAiB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACvD,QAAQ,CAAC,IAAI,kBAAkB;IAE/B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,WAAW,CAAuB;IAG1C,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,aAAa,CAAkC;gBAE3C,MAAM,EAAE,iBAAiB;IAM/B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAkDnC,sEAAsE;IACtE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAKnC;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAI5B,eAAe,IAAI,OAAO;YAIZ,WAAW;IAWzB,OAAO,CAAC,OAAO;IAOf;;;OAGG;YACW,aAAa;YAyCb,eAAe;IAiCvB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6CzC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAwBnD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAclD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAc3C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4EjE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAoB9D,4DAA4D;IAC5D,UAAU,IAAI,IAAI;CAInB"}