@noy-db/to-drive 0.1.0-pre.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vLannaAi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,33 @@
+# @noy-db/to-drive
+
+[![npm](https://img.shields.io/npm/v/%40noy-db/to-drive.svg)](https://www.npmjs.com/package/@noy-db/to-drive)
+
+> Google Drive bundle store for noy-db. Stores the whole vault as a single .noydb file in Drive's hidden appDataFolder; opaque ULID filenames never leak compartment names. Driver-agnostic
+
+Part of [**`@noy-db/hub`**](https://www.npmjs.com/package/@noy-db/hub) — the zero-knowledge, offline-first, encrypted document store.
+
+## Install
+
+```bash
+pnpm add @noy-db/hub @noy-db/to-drive
+```
+
+## What it is
+
+Google Drive bundle store for noy-db. Stores the whole vault as a single .noydb file in Drive's hidden appDataFolder; opaque ULID filenames never leak compartment names. Driver-agnostic — bring your own OAuth token.
+
+## Status
+
+**Pre-release** (`0.1.0-pre.1`). API may change before `1.0`.
+
+## Documentation
+
+See the [main repository](https://github.com/vLannaAi/noy-db#readme) for setup, examples, and the full subsystem catalog.
+
+- Source — [`packages/to-drive`](https://github.com/vLannaAi/noy-db/tree/main/packages/to-drive)
+- Issues — [github.com/vLannaAi/noy-db/issues](https://github.com/vLannaAi/noy-db/issues)
+- Spec — [`SPEC.md`](https://github.com/vLannaAi/noy-db/blob/main/SPEC.md)
+
+## License
+
+[MIT](./LICENSE) © vLannaAi

package/dist/index.cjs

@@ -0,0 +1,142 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  drive: () => drive,
+  memoryHandleStore: () => memoryHandleStore,
+  newUlid: () => newUlid
+});
+module.exports = __toCommonJS(index_exports);
+var import_hub = require("@noy-db/hub");
+function memoryHandleStore() {
+  const map = /* @__PURE__ */ new Map();
+  return {
+    async getHandle(vaultId) {
+      return map.get(vaultId) ?? null;
+    },
+    async setHandle(vaultId, handle) {
+      map.set(vaultId, handle);
+    },
+    async deleteHandle(vaultId) {
+      map.delete(vaultId);
+    },
+    async listHandles() {
+      return [...map.entries()].map(([vaultId, handle]) => ({ vaultId, handle }));
+    }
+  };
+}
+var ULID_ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+function newUlid() {
+  const time = Date.now();
+  let timePart = "";
+  let t = time;
+  for (let i = 0; i < 10; i++) {
+    timePart = ULID_ALPHABET[t % 32] + timePart;
+    t = Math.floor(t / 32);
+  }
+  const rand = globalThis.crypto.getRandomValues(new Uint8Array(16));
+  let randPart = "";
+  for (const byte of rand) {
+    randPart += ULID_ALPHABET[byte % 32];
+  }
+  return timePart + randPart;
+}
+var APP_DATA_FOLDER = "appDataFolder";
+var DEFAULT_MIME = "application/octet-stream";
+function drive(options) {
+  const parentId = options.parentId ?? APP_DATA_FOLDER;
+  const handles = options.handles ?? memoryHandleStore();
+  const suffix = options.suffix ?? ".noydb";
+  const { drive: client } = options;
+  async function handleFor(vaultId) {
+    return handles.getHandle(vaultId);
+  }
+  return {
+    kind: "bundle",
+    name: "google-drive",
+    async readBundle(vaultId) {
+      const handle = await handleFor(vaultId);
+      if (!handle) return null;
+      const meta = await client.getFileMetadata(handle.fileId);
+      if (!meta) {
+        await handles.deleteHandle(vaultId);
+        return null;
+      }
+      const bytes = await client.getFileBytes(handle.fileId);
+      if (!bytes) return null;
+      return { bytes, version: meta.headRevisionId };
+    },
+    async writeBundle(vaultId, bytes, expectedVersion) {
+      const handle = await handleFor(vaultId);
+      if (!handle) {
+        if (expectedVersion !== null) {
+          throw new import_hub.BundleVersionConflictError(
+            `No existing bundle for vault "${vaultId}" but expectedVersion="${expectedVersion}" was supplied.`
+          );
+        }
+        const name = `${newUlid()}${suffix}`;
+        const meta2 = await client.createFile({
+          name,
+          bytes,
+          parents: [parentId],
+          mimeType: DEFAULT_MIME
+        });
+        await handles.setHandle(vaultId, { fileId: meta2.id, name: meta2.name });
+        return { version: meta2.headRevisionId };
+      }
+      const meta = await client.updateFile(handle.fileId, {
+        bytes,
+        expectedRevision: expectedVersion
+      });
+      return { version: meta.headRevisionId };
+    },
+    async deleteBundle(vaultId) {
+      const handle = await handleFor(vaultId);
+      if (!handle) return;
+      try {
+        await client.deleteFile(handle.fileId);
+      } catch {
+      }
+      await handles.deleteHandle(vaultId);
+    },
+    async listBundles() {
+      if (handles.listHandles) {
+        const known = await handles.listHandles();
+        const out = [];
+        for (const { vaultId, handle } of known) {
+          const meta = await client.getFileMetadata(handle.fileId);
+          if (!meta) continue;
+          out.push({ vaultId, version: meta.headRevisionId, size: meta.size });
+        }
+        return out;
+      }
+      const files = await client.listFiles({ parents: [parentId], mimeType: DEFAULT_MIME });
+      return files.filter((f) => f.name.endsWith(suffix)).map((f) => ({ vaultId: f.name.slice(0, -suffix.length), version: f.headRevisionId, size: f.size }));
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  drive,
+  memoryHandleStore,
+  newUlid
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * **@noy-db/to-drive** — Google Drive bundle store for noy-db.\n *\n * Stores each vault as a single `.noydb` bundle in Drive. Implements\n * the `NoydbBundleStore` contract (read/write/delete/list whole-bundle);\n * wrap with `wrapBundleStore()` from `@noy-db/hub` to get the standard\n * six-method `NoydbStore` surface.\n *\n * ## Privacy posture\n *\n * - **ULID filenames** — `01HXG4F5ZK7…noydb`, never `acme.noydb`.\n *   Drive folder listings are visible to share recipients, Workspace\n *   admins on managed accounts, and Google's internal search index.\n *   Naming the file after the vault leaks client identity to all of\n *   those. ULIDs give a sortable, collision-free alternative that\n *   discloses nothing.\n * - **`appDataFolder` by default** — a hidden Drive folder that does\n *   NOT show in the Drive UI and is scoped to the installed app only.\n *   Opt in to a user-visible folder for \"restore from Drive\" UX.\n * - **`drive.file` scope** — the OAuth token can only see files this\n *   app created. No read access to the user's other Drive contents.\n * - **No custom properties** — Drive allows arbitrary key/value\n *   metadata on files. This adapter writes nothing there. Every piece\n *   of vault metadata lives inside the encrypted body.\n *\n * ## Driver — bring your own\n *\n * noy-db does NOT pull `googleapis` (or any Google SDK) as a runtime\n * dependency. The consumer wires their preferred client (`googleapis`,\n * `gapi-client-ts`, a bespoke `fetch` wrapper) and passes a duck-typed\n * `DriveClient` in. Every OAuth refresh concern stays outside this\n * package.\n *\n * ## Handle registry\n *\n * Drive's API identifies files by `fileId`, not filename. To resolve\n * \"give me the bundle for vault ACME,\" the store needs to remember\n * which fileId corresponds to which vault. Two options:\n *\n *   1. **Consumer-persisted** — pass a `HandleStore` that implements\n *      `getHandle(vaultId)` / `setHandle(vaultId, handle)`. Typical\n *      implementations: localStorage in browsers, the vault's\n *      `_sync_credentials` collection, or a JSON file on disk.\n *   2. **Drive-lookup** (default) — when no handle is cached, issue a\n *      `files.list` call filtering by the ULID-encoded vaultId hash.\n *      Slower but requires no extra plumbing.\n *\n * @packageDocumentation\n */\n\nimport type { NoydbBundleStore } from '@noy-db/hub'\nimport { BundleVersionConflictError } from '@noy-db/hub'\n\n// ── Duck-typed Drive client ──────────────────────────────────────────────\n\n/**\n * Minimal shape the store needs from a Google Drive client. Every\n * production Drive wrapper (`googleapis`, `gapi`, hand-rolled `fetch`\n * code) can expose this surface with a thin adapter.\n */\nexport interface DriveClient {\n  createFile(request: DriveCreateRequest): Promise<DriveFileMeta>\n  updateFile(fileId: string, request: DriveUpdateRequest): Promise<DriveFileMeta>\n  getFileMetadata(fileId: string): Promise<DriveFileMeta | null>\n  getFileBytes(fileId: string): Promise<Uint8Array | null>\n  deleteFile(fileId: string): Promise<void>\n  listFiles(query: DriveListQuery): Promise<DriveFileMeta[]>\n}\n\nexport interface DriveCreateRequest {\n  readonly name: string\n  readonly bytes: Uint8Array\n  readonly parents: readonly string[]\n  readonly mimeType?: string\n}\n\nexport interface DriveUpdateRequest {\n  readonly bytes: Uint8Array\n  readonly expectedRevision?: string | null\n}\n\nexport interface DriveListQuery {\n  readonly parents?: readonly string[]\n  readonly namePrefix?: string\n  readonly nameExact?: string\n  readonly mimeType?: string\n  readonly limit?: number\n}\n\nexport interface DriveFileMeta {\n  readonly id: string\n  readonly name: string\n  readonly headRevisionId: string\n  readonly size: number\n}\n\n// ── Handle registry ──────────────────────────────────────────────────────\n\nexport interface HandleStore {\n  getHandle(vaultId: string): Promise<DriveHandle | null>\n  setHandle(vaultId: string, handle: DriveHandle): Promise<void>\n  deleteHandle(vaultId: string): Promise<void>\n  /** Return every known { vaultId, handle } pair. Used by `listBundles()`. */\n  listHandles?(): Promise<Array<{ vaultId: string; handle: DriveHandle }>>\n}\n\nexport interface DriveHandle {\n  /** Stable Drive fileId. */\n  readonly fileId: string\n  /** ULID filename — what lives in Drive. */\n  readonly name: string\n}\n\n/**\n * In-memory handle store — fine for short-lived processes and tests.\n * Production consumers should persist handles to localStorage, IDB,\n * or a vault's `_sync_credentials` collection.\n */\nexport function memoryHandleStore(): HandleStore {\n  const map = new Map<string, DriveHandle>()\n  return {\n    async getHandle(vaultId) { return map.get(vaultId) ?? null },\n    async setHandle(vaultId, handle) { map.set(vaultId, handle) },\n    async deleteHandle(vaultId) { map.delete(vaultId) },\n    async listHandles() {\n      return [...map.entries()].map(([vaultId, handle]) => ({ vaultId, handle }))\n    },\n  }\n}\n\n// ── ULID generator (minimal, copy-free) ───────────────────────────────────\n\nconst ULID_ALPHABET = '0123456789ABCDEFGHJKMNPQRSTVWXYZ'\n\n/**\n * Generate a new ULID — 26 characters: 10 chars of timestamp (ms\n * granularity, sortable lexically when generated ≥ 1 ms apart) plus\n * 16 chars of entropy (80 bits).\n */\nexport function newUlid(): string {\n  const time = Date.now()\n  let timePart = ''\n  let t = time\n  for (let i = 0; i < 10; i++) {\n    timePart = ULID_ALPHABET[t % 32]! + timePart\n    t = Math.floor(t / 32)\n  }\n  // 16 chars of random → 16 bytes. 256 is a multiple of 32 so `byte % 32`\n  // produces a uniform distribution over the alphabet.\n  const rand = globalThis.crypto.getRandomValues(new Uint8Array(16))\n  let randPart = ''\n  for (const byte of rand) {\n    randPart += ULID_ALPHABET[byte % 32]\n  }\n  return timePart + randPart\n}\n\n// ── Options + factory ────────────────────────────────────────────────────\n\nexport interface DriveStoreOptions {\n  readonly drive: DriveClient\n  /**\n   * Parent folder id. Defaults to Drive's `appDataFolder` — hidden from\n   * the user, scoped to the app. Pass an explicit id to use a\n   * user-visible folder.\n   */\n  readonly parentId?: string\n  /** Handle registry — memory by default. Persist yourself in prod. */\n  readonly handles?: HandleStore\n  /** Bundle filename suffix. Default `'.noydb'`. */\n  readonly suffix?: string\n}\n\nconst APP_DATA_FOLDER = 'appDataFolder'\nconst DEFAULT_MIME = 'application/octet-stream'\n\nexport function drive(options: DriveStoreOptions): NoydbBundleStore {\n  const parentId = options.parentId ?? APP_DATA_FOLDER\n  const handles = options.handles ?? memoryHandleStore()\n  const suffix = options.suffix ?? '.noydb'\n  const { drive: client } = options\n\n  async function handleFor(vaultId: string): Promise<DriveHandle | null> {\n    return handles.getHandle(vaultId)\n  }\n\n  return {\n    kind: 'bundle',\n    name: 'google-drive',\n\n    async readBundle(vaultId) {\n      const handle = await handleFor(vaultId)\n      if (!handle) return null\n\n      const meta = await client.getFileMetadata(handle.fileId)\n      if (!meta) {\n        // Out-of-band deletion — clear the cached handle.\n        await handles.deleteHandle(vaultId)\n        return null\n      }\n      const bytes = await client.getFileBytes(handle.fileId)\n      if (!bytes) return null\n      return { bytes, version: meta.headRevisionId }\n    },\n\n    async writeBundle(vaultId, bytes, expectedVersion) {\n      const handle = await handleFor(vaultId)\n      if (!handle) {\n        if (expectedVersion !== null) {\n          throw new BundleVersionConflictError(\n            `No existing bundle for vault \"${vaultId}\" but expectedVersion=\"${expectedVersion}\" was supplied.`,\n          )\n        }\n        const name = `${newUlid()}${suffix}`\n        const meta = await client.createFile({\n          name,\n          bytes,\n          parents: [parentId],\n          mimeType: DEFAULT_MIME,\n        })\n        await handles.setHandle(vaultId, { fileId: meta.id, name: meta.name })\n        return { version: meta.headRevisionId }\n      }\n      const meta = await client.updateFile(handle.fileId, {\n        bytes,\n        expectedRevision: expectedVersion,\n      })\n      return { version: meta.headRevisionId }\n    },\n\n    async deleteBundle(vaultId) {\n      const handle = await handleFor(vaultId)\n      if (!handle) return\n      try {\n        await client.deleteFile(handle.fileId)\n      } catch {\n        // Already gone.\n      }\n      await handles.deleteHandle(vaultId)\n    },\n\n    async listBundles() {\n      if (handles.listHandles) {\n        const known = await handles.listHandles()\n        const out: Array<{ vaultId: string; version: string; size: number }> = []\n        for (const { vaultId, handle } of known) {\n          const meta = await client.getFileMetadata(handle.fileId)\n          if (!meta) continue\n          out.push({ vaultId, version: meta.headRevisionId, size: meta.size })\n        }\n        return out\n      }\n      // No handle index: fall back to Drive listing. This returns Drive\n      // file ids as \"vault ids\", which is imperfect — consumers are\n      // expected to either run a handle store or never call listBundles.\n      const files = await client.listFiles({ parents: [parentId], mimeType: DEFAULT_MIME })\n      return files\n        .filter(f => f.name.endsWith(suffix))\n        .map(f => ({ vaultId: f.name.slice(0, -suffix.length), version: f.headRevisionId, size: f.size }))\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAmDA,iBAA2C;AAmEpC,SAAS,oBAAiC;AAC/C,QAAM,MAAM,oBAAI,IAAyB;AACzC,SAAO;AAAA,IACL,MAAM,UAAU,SAAS;AAAE,aAAO,IAAI,IAAI,OAAO,KAAK;AAAA,IAAK;AAAA,IAC3D,MAAM,UAAU,SAAS,QAAQ;AAAE,UAAI,IAAI,SAAS,MAAM;AAAA,IAAE;AAAA,IAC5D,MAAM,aAAa,SAAS;AAAE,UAAI,OAAO,OAAO;AAAA,IAAE;AAAA,IAClD,MAAM,cAAc;AAClB,aAAO,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,SAAS,OAAO,EAAE;AAAA,IAC5E;AAAA,EACF;AACF;AAIA,IAAM,gBAAgB;AAOf,SAAS,UAAkB;AAChC,QAAM,OAAO,KAAK,IAAI;AACtB,MAAI,WAAW;AACf,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,eAAW,cAAc,IAAI,EAAE,IAAK;AACpC,QAAI,KAAK,MAAM,IAAI,EAAE;AAAA,EACvB;AAGA,QAAM,OAAO,WAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AACjE,MAAI,WAAW;AACf,aAAW,QAAQ,MAAM;AACvB,gBAAY,cAAc,OAAO,EAAE;AAAA,EACrC;AACA,SAAO,WAAW;AACpB;AAkBA,IAAM,kBAAkB;AACxB,IAAM,eAAe;AAEd,SAAS,MAAM,SAA8C;AAClE,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,QAAQ,WAAW,kBAAkB;AACrD,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,EAAE,OAAO,OAAO,IAAI;AAE1B,iBAAe,UAAU,SAA8C;AACrE,WAAO,QAAQ,UAAU,OAAO;AAAA,EAClC;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IAEN,MAAM,WAAW,SAAS;AACxB,YAAM,SAAS,MAAM,UAAU,OAAO;AACtC,UAAI,CAAC,OAAQ,QAAO;AAEpB,YAAM,OAAO,MAAM,OAAO,gBAAgB,OAAO,MAAM;AACvD,UAAI,CAAC,MAAM;AAET,cAAM,QAAQ,aAAa,OAAO;AAClC,eAAO;AAAA,MACT;AACA,YAAM,QAAQ,MAAM,OAAO,aAAa,OAAO,MAAM;AACrD,UAAI,CAAC,MAAO,QAAO;AACnB,aAAO,EAAE,OAAO,SAAS,KAAK,eAAe;AAAA,IAC/C;AAAA,IAEA,MAAM,YAAY,SAAS,OAAO,iBAAiB;AACjD,YAAM,SAAS,MAAM,UAAU,OAAO;AACtC,UAAI,CAAC,QAAQ;AACX,YAAI,oBAAoB,MAAM;AAC5B,gBAAM,IAAI;AAAA,YACR,iCAAiC,OAAO,0BAA0B,eAAe;AAAA,UACnF;AAAA,QACF;AACA,cAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,MAAM;AAClC,cAAMA,QAAO,MAAM,OAAO,WAAW;AAAA,UACnC;AAAA,UACA;AAAA,UACA,SAAS,CAAC,QAAQ;AAAA,UAClB,UAAU;AAAA,QACZ,CAAC;AACD,cAAM,QAAQ,UAAU,SAAS,EAAE,QAAQA,MAAK,IAAI,MAAMA,MAAK,KAAK,CAAC;AACrE,eAAO,EAAE,SAASA,MAAK,eAAe;AAAA,MACxC;AACA,YAAM,OAAO,MAAM,OAAO,WAAW,OAAO,QAAQ;AAAA,QAClD;AAAA,QACA,kBAAkB;AAAA,MACpB,CAAC;AACD,aAAO,EAAE,SAAS,KAAK,eAAe;AAAA,IACxC;AAAA,IAEA,MAAM,aAAa,SAAS;AAC1B,YAAM,SAAS,MAAM,UAAU,OAAO;AACtC,UAAI,CAAC,OAAQ;AACb,UAAI;AACF,cAAM,OAAO,WAAW,OAAO,MAAM;AAAA,MACvC,QAAQ;AAAA,MAER;AACA,YAAM,QAAQ,aAAa,OAAO;AAAA,IACpC;AAAA,IAEA,MAAM,cAAc;AAClB,UAAI,QAAQ,aAAa;AACvB,cAAM,QAAQ,MAAM,QAAQ,YAAY;AACxC,cAAM,MAAiE,CAAC;AACxE,mBAAW,EAAE,SAAS,OAAO,KAAK,OAAO;AACvC,gBAAM,OAAO,MAAM,OAAO,gBAAgB,OAAO,MAAM;AACvD,cAAI,CAAC,KAAM;AACX,cAAI,KAAK,EAAE,SAAS,SAAS,KAAK,gBAAgB,MAAM,KAAK,KAAK,CAAC;AAAA,QACrE;AACA,eAAO;AAAA,MACT;AAIA,YAAM,QAAQ,MAAM,OAAO,UAAU,EAAE,SAAS,CAAC,QAAQ,GAAG,UAAU,aAAa,CAAC;AACpF,aAAO,MACJ,OAAO,OAAK,EAAE,KAAK,SAAS,MAAM,CAAC,EACnC,IAAI,QAAM,EAAE,SAAS,EAAE,KAAK,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,SAAS,EAAE,gBAAgB,MAAM,EAAE,KAAK,EAAE;AAAA,IACrG;AAAA,EACF;AACF;","names":["meta"]}

package/dist/index.d.cts

@@ -0,0 +1,132 @@
+import { NoydbBundleStore } from '@noy-db/hub';
+
+/**
+ * **@noy-db/to-drive** — Google Drive bundle store for noy-db.
+ *
+ * Stores each vault as a single `.noydb` bundle in Drive. Implements
+ * the `NoydbBundleStore` contract (read/write/delete/list whole-bundle);
+ * wrap with `wrapBundleStore()` from `@noy-db/hub` to get the standard
+ * six-method `NoydbStore` surface.
+ *
+ * ## Privacy posture
+ *
+ * - **ULID filenames** — `01HXG4F5ZK7…noydb`, never `acme.noydb`.
+ *   Drive folder listings are visible to share recipients, Workspace
+ *   admins on managed accounts, and Google's internal search index.
+ *   Naming the file after the vault leaks client identity to all of
+ *   those. ULIDs give a sortable, collision-free alternative that
+ *   discloses nothing.
+ * - **`appDataFolder` by default** — a hidden Drive folder that does
+ *   NOT show in the Drive UI and is scoped to the installed app only.
+ *   Opt in to a user-visible folder for "restore from Drive" UX.
+ * - **`drive.file` scope** — the OAuth token can only see files this
+ *   app created. No read access to the user's other Drive contents.
+ * - **No custom properties** — Drive allows arbitrary key/value
+ *   metadata on files. This adapter writes nothing there. Every piece
+ *   of vault metadata lives inside the encrypted body.
+ *
+ * ## Driver — bring your own
+ *
+ * noy-db does NOT pull `googleapis` (or any Google SDK) as a runtime
+ * dependency. The consumer wires their preferred client (`googleapis`,
+ * `gapi-client-ts`, a bespoke `fetch` wrapper) and passes a duck-typed
+ * `DriveClient` in. Every OAuth refresh concern stays outside this
+ * package.
+ *
+ * ## Handle registry
+ *
+ * Drive's API identifies files by `fileId`, not filename. To resolve
+ * "give me the bundle for vault ACME," the store needs to remember
+ * which fileId corresponds to which vault. Two options:
+ *
+ *   1. **Consumer-persisted** — pass a `HandleStore` that implements
+ *      `getHandle(vaultId)` / `setHandle(vaultId, handle)`. Typical
+ *      implementations: localStorage in browsers, the vault's
+ *      `_sync_credentials` collection, or a JSON file on disk.
+ *   2. **Drive-lookup** (default) — when no handle is cached, issue a
+ *      `files.list` call filtering by the ULID-encoded vaultId hash.
+ *      Slower but requires no extra plumbing.
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Minimal shape the store needs from a Google Drive client. Every
+ * production Drive wrapper (`googleapis`, `gapi`, hand-rolled `fetch`
+ * code) can expose this surface with a thin adapter.
+ */
+interface DriveClient {
+    createFile(request: DriveCreateRequest): Promise<DriveFileMeta>;
+    updateFile(fileId: string, request: DriveUpdateRequest): Promise<DriveFileMeta>;
+    getFileMetadata(fileId: string): Promise<DriveFileMeta | null>;
+    getFileBytes(fileId: string): Promise<Uint8Array | null>;
+    deleteFile(fileId: string): Promise<void>;
+    listFiles(query: DriveListQuery): Promise<DriveFileMeta[]>;
+}
+interface DriveCreateRequest {
+    readonly name: string;
+    readonly bytes: Uint8Array;
+    readonly parents: readonly string[];
+    readonly mimeType?: string;
+}
+interface DriveUpdateRequest {
+    readonly bytes: Uint8Array;
+    readonly expectedRevision?: string | null;
+}
+interface DriveListQuery {
+    readonly parents?: readonly string[];
+    readonly namePrefix?: string;
+    readonly nameExact?: string;
+    readonly mimeType?: string;
+    readonly limit?: number;
+}
+interface DriveFileMeta {
+    readonly id: string;
+    readonly name: string;
+    readonly headRevisionId: string;
+    readonly size: number;
+}
+interface HandleStore {
+    getHandle(vaultId: string): Promise<DriveHandle | null>;
+    setHandle(vaultId: string, handle: DriveHandle): Promise<void>;
+    deleteHandle(vaultId: string): Promise<void>;
+    /** Return every known { vaultId, handle } pair. Used by `listBundles()`. */
+    listHandles?(): Promise<Array<{
+        vaultId: string;
+        handle: DriveHandle;
+    }>>;
+}
+interface DriveHandle {
+    /** Stable Drive fileId. */
+    readonly fileId: string;
+    /** ULID filename — what lives in Drive. */
+    readonly name: string;
+}
+/**
+ * In-memory handle store — fine for short-lived processes and tests.
+ * Production consumers should persist handles to localStorage, IDB,
+ * or a vault's `_sync_credentials` collection.
+ */
+declare function memoryHandleStore(): HandleStore;
+/**
+ * Generate a new ULID — 26 characters: 10 chars of timestamp (ms
+ * granularity, sortable lexically when generated ≥ 1 ms apart) plus
+ * 16 chars of entropy (80 bits).
+ */
+declare function newUlid(): string;
+interface DriveStoreOptions {
+    readonly drive: DriveClient;
+    /**
+     * Parent folder id. Defaults to Drive's `appDataFolder` — hidden from
+     * the user, scoped to the app. Pass an explicit id to use a
+     * user-visible folder.
+     */
+    readonly parentId?: string;
+    /** Handle registry — memory by default. Persist yourself in prod. */
+    readonly handles?: HandleStore;
+    /** Bundle filename suffix. Default `'.noydb'`. */
+    readonly suffix?: string;
+}
+declare function drive(options: DriveStoreOptions): NoydbBundleStore;
+
+export { type DriveClient, type DriveCreateRequest, type DriveFileMeta, type DriveHandle, type DriveListQuery, type DriveStoreOptions, type DriveUpdateRequest, type HandleStore, drive, memoryHandleStore, newUlid };

package/dist/index.d.ts

@@ -0,0 +1,132 @@
+import { NoydbBundleStore } from '@noy-db/hub';
+
+/**
+ * **@noy-db/to-drive** — Google Drive bundle store for noy-db.
+ *
+ * Stores each vault as a single `.noydb` bundle in Drive. Implements
+ * the `NoydbBundleStore` contract (read/write/delete/list whole-bundle);
+ * wrap with `wrapBundleStore()` from `@noy-db/hub` to get the standard
+ * six-method `NoydbStore` surface.
+ *
+ * ## Privacy posture
+ *
+ * - **ULID filenames** — `01HXG4F5ZK7…noydb`, never `acme.noydb`.
+ *   Drive folder listings are visible to share recipients, Workspace
+ *   admins on managed accounts, and Google's internal search index.
+ *   Naming the file after the vault leaks client identity to all of
+ *   those. ULIDs give a sortable, collision-free alternative that
+ *   discloses nothing.
+ * - **`appDataFolder` by default** — a hidden Drive folder that does
+ *   NOT show in the Drive UI and is scoped to the installed app only.
+ *   Opt in to a user-visible folder for "restore from Drive" UX.
+ * - **`drive.file` scope** — the OAuth token can only see files this
+ *   app created. No read access to the user's other Drive contents.
+ * - **No custom properties** — Drive allows arbitrary key/value
+ *   metadata on files. This adapter writes nothing there. Every piece
+ *   of vault metadata lives inside the encrypted body.
+ *
+ * ## Driver — bring your own
+ *
+ * noy-db does NOT pull `googleapis` (or any Google SDK) as a runtime
+ * dependency. The consumer wires their preferred client (`googleapis`,
+ * `gapi-client-ts`, a bespoke `fetch` wrapper) and passes a duck-typed
+ * `DriveClient` in. Every OAuth refresh concern stays outside this
+ * package.
+ *
+ * ## Handle registry
+ *
+ * Drive's API identifies files by `fileId`, not filename. To resolve
+ * "give me the bundle for vault ACME," the store needs to remember
+ * which fileId corresponds to which vault. Two options:
+ *
+ *   1. **Consumer-persisted** — pass a `HandleStore` that implements
+ *      `getHandle(vaultId)` / `setHandle(vaultId, handle)`. Typical
+ *      implementations: localStorage in browsers, the vault's
+ *      `_sync_credentials` collection, or a JSON file on disk.
+ *   2. **Drive-lookup** (default) — when no handle is cached, issue a
+ *      `files.list` call filtering by the ULID-encoded vaultId hash.
+ *      Slower but requires no extra plumbing.
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Minimal shape the store needs from a Google Drive client. Every
+ * production Drive wrapper (`googleapis`, `gapi`, hand-rolled `fetch`
+ * code) can expose this surface with a thin adapter.
+ */
+interface DriveClient {
+    createFile(request: DriveCreateRequest): Promise<DriveFileMeta>;
+    updateFile(fileId: string, request: DriveUpdateRequest): Promise<DriveFileMeta>;
+    getFileMetadata(fileId: string): Promise<DriveFileMeta | null>;
+    getFileBytes(fileId: string): Promise<Uint8Array | null>;
+    deleteFile(fileId: string): Promise<void>;
+    listFiles(query: DriveListQuery): Promise<DriveFileMeta[]>;
+}
+interface DriveCreateRequest {
+    readonly name: string;
+    readonly bytes: Uint8Array;
+    readonly parents: readonly string[];
+    readonly mimeType?: string;
+}
+interface DriveUpdateRequest {
+    readonly bytes: Uint8Array;
+    readonly expectedRevision?: string | null;
+}
+interface DriveListQuery {
+    readonly parents?: readonly string[];
+    readonly namePrefix?: string;
+    readonly nameExact?: string;
+    readonly mimeType?: string;
+    readonly limit?: number;
+}
+interface DriveFileMeta {
+    readonly id: string;
+    readonly name: string;
+    readonly headRevisionId: string;
+    readonly size: number;
+}
+interface HandleStore {
+    getHandle(vaultId: string): Promise<DriveHandle | null>;
+    setHandle(vaultId: string, handle: DriveHandle): Promise<void>;
+    deleteHandle(vaultId: string): Promise<void>;
+    /** Return every known { vaultId, handle } pair. Used by `listBundles()`. */
+    listHandles?(): Promise<Array<{
+        vaultId: string;
+        handle: DriveHandle;
+    }>>;
+}
+interface DriveHandle {
+    /** Stable Drive fileId. */
+    readonly fileId: string;
+    /** ULID filename — what lives in Drive. */
+    readonly name: string;
+}
+/**
+ * In-memory handle store — fine for short-lived processes and tests.
+ * Production consumers should persist handles to localStorage, IDB,
+ * or a vault's `_sync_credentials` collection.
+ */
+declare function memoryHandleStore(): HandleStore;
+/**
+ * Generate a new ULID — 26 characters: 10 chars of timestamp (ms
+ * granularity, sortable lexically when generated ≥ 1 ms apart) plus
+ * 16 chars of entropy (80 bits).
+ */
+declare function newUlid(): string;
+interface DriveStoreOptions {
+    readonly drive: DriveClient;
+    /**
+     * Parent folder id. Defaults to Drive's `appDataFolder` — hidden from
+     * the user, scoped to the app. Pass an explicit id to use a
+     * user-visible folder.
+     */
+    readonly parentId?: string;
+    /** Handle registry — memory by default. Persist yourself in prod. */
+    readonly handles?: HandleStore;
+    /** Bundle filename suffix. Default `'.noydb'`. */
+    readonly suffix?: string;
+}
+declare function drive(options: DriveStoreOptions): NoydbBundleStore;
+
+export { type DriveClient, type DriveCreateRequest, type DriveFileMeta, type DriveHandle, type DriveListQuery, type DriveStoreOptions, type DriveUpdateRequest, type HandleStore, drive, memoryHandleStore, newUlid };

package/dist/index.js

@@ -0,0 +1,115 @@
+// src/index.ts
+import { BundleVersionConflictError } from "@noy-db/hub";
+function memoryHandleStore() {
+  const map = /* @__PURE__ */ new Map();
+  return {
+    async getHandle(vaultId) {
+      return map.get(vaultId) ?? null;
+    },
+    async setHandle(vaultId, handle) {
+      map.set(vaultId, handle);
+    },
+    async deleteHandle(vaultId) {
+      map.delete(vaultId);
+    },
+    async listHandles() {
+      return [...map.entries()].map(([vaultId, handle]) => ({ vaultId, handle }));
+    }
+  };
+}
+var ULID_ALPHABET = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+function newUlid() {
+  const time = Date.now();
+  let timePart = "";
+  let t = time;
+  for (let i = 0; i < 10; i++) {
+    timePart = ULID_ALPHABET[t % 32] + timePart;
+    t = Math.floor(t / 32);
+  }
+  const rand = globalThis.crypto.getRandomValues(new Uint8Array(16));
+  let randPart = "";
+  for (const byte of rand) {
+    randPart += ULID_ALPHABET[byte % 32];
+  }
+  return timePart + randPart;
+}
+var APP_DATA_FOLDER = "appDataFolder";
+var DEFAULT_MIME = "application/octet-stream";
+function drive(options) {
+  const parentId = options.parentId ?? APP_DATA_FOLDER;
+  const handles = options.handles ?? memoryHandleStore();
+  const suffix = options.suffix ?? ".noydb";
+  const { drive: client } = options;
+  async function handleFor(vaultId) {
+    return handles.getHandle(vaultId);
+  }
+  return {
+    kind: "bundle",
+    name: "google-drive",
+    async readBundle(vaultId) {
+      const handle = await handleFor(vaultId);
+      if (!handle) return null;
+      const meta = await client.getFileMetadata(handle.fileId);
+      if (!meta) {
+        await handles.deleteHandle(vaultId);
+        return null;
+      }
+      const bytes = await client.getFileBytes(handle.fileId);
+      if (!bytes) return null;
+      return { bytes, version: meta.headRevisionId };
+    },
+    async writeBundle(vaultId, bytes, expectedVersion) {
+      const handle = await handleFor(vaultId);
+      if (!handle) {
+        if (expectedVersion !== null) {
+          throw new BundleVersionConflictError(
+            `No existing bundle for vault "${vaultId}" but expectedVersion="${expectedVersion}" was supplied.`
+          );
+        }
+        const name = `${newUlid()}${suffix}`;
+        const meta2 = await client.createFile({
+          name,
+          bytes,
+          parents: [parentId],
+          mimeType: DEFAULT_MIME
+        });
+        await handles.setHandle(vaultId, { fileId: meta2.id, name: meta2.name });
+        return { version: meta2.headRevisionId };
+      }
+      const meta = await client.updateFile(handle.fileId, {
+        bytes,
+        expectedRevision: expectedVersion
+      });
+      return { version: meta.headRevisionId };
+    },
+    async deleteBundle(vaultId) {
+      const handle = await handleFor(vaultId);
+      if (!handle) return;
+      try {
+        await client.deleteFile(handle.fileId);
+      } catch {
+      }
+      await handles.deleteHandle(vaultId);
+    },
+    async listBundles() {
+      if (handles.listHandles) {
+        const known = await handles.listHandles();
+        const out = [];
+        for (const { vaultId, handle } of known) {
+          const meta = await client.getFileMetadata(handle.fileId);
+          if (!meta) continue;
+          out.push({ vaultId, version: meta.headRevisionId, size: meta.size });
+        }
+        return out;
+      }
+      const files = await client.listFiles({ parents: [parentId], mimeType: DEFAULT_MIME });
+      return files.filter((f) => f.name.endsWith(suffix)).map((f) => ({ vaultId: f.name.slice(0, -suffix.length), version: f.headRevisionId, size: f.size }));
+    }
+  };
+}
+export {
+  drive,
+  memoryHandleStore,
+  newUlid
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * **@noy-db/to-drive** — Google Drive bundle store for noy-db.\n *\n * Stores each vault as a single `.noydb` bundle in Drive. Implements\n * the `NoydbBundleStore` contract (read/write/delete/list whole-bundle);\n * wrap with `wrapBundleStore()` from `@noy-db/hub` to get the standard\n * six-method `NoydbStore` surface.\n *\n * ## Privacy posture\n *\n * - **ULID filenames** — `01HXG4F5ZK7…noydb`, never `acme.noydb`.\n *   Drive folder listings are visible to share recipients, Workspace\n *   admins on managed accounts, and Google's internal search index.\n *   Naming the file after the vault leaks client identity to all of\n *   those. ULIDs give a sortable, collision-free alternative that\n *   discloses nothing.\n * - **`appDataFolder` by default** — a hidden Drive folder that does\n *   NOT show in the Drive UI and is scoped to the installed app only.\n *   Opt in to a user-visible folder for \"restore from Drive\" UX.\n * - **`drive.file` scope** — the OAuth token can only see files this\n *   app created. No read access to the user's other Drive contents.\n * - **No custom properties** — Drive allows arbitrary key/value\n *   metadata on files. This adapter writes nothing there. Every piece\n *   of vault metadata lives inside the encrypted body.\n *\n * ## Driver — bring your own\n *\n * noy-db does NOT pull `googleapis` (or any Google SDK) as a runtime\n * dependency. The consumer wires their preferred client (`googleapis`,\n * `gapi-client-ts`, a bespoke `fetch` wrapper) and passes a duck-typed\n * `DriveClient` in. Every OAuth refresh concern stays outside this\n * package.\n *\n * ## Handle registry\n *\n * Drive's API identifies files by `fileId`, not filename. To resolve\n * \"give me the bundle for vault ACME,\" the store needs to remember\n * which fileId corresponds to which vault. Two options:\n *\n *   1. **Consumer-persisted** — pass a `HandleStore` that implements\n *      `getHandle(vaultId)` / `setHandle(vaultId, handle)`. Typical\n *      implementations: localStorage in browsers, the vault's\n *      `_sync_credentials` collection, or a JSON file on disk.\n *   2. **Drive-lookup** (default) — when no handle is cached, issue a\n *      `files.list` call filtering by the ULID-encoded vaultId hash.\n *      Slower but requires no extra plumbing.\n *\n * @packageDocumentation\n */\n\nimport type { NoydbBundleStore } from '@noy-db/hub'\nimport { BundleVersionConflictError } from '@noy-db/hub'\n\n// ── Duck-typed Drive client ──────────────────────────────────────────────\n\n/**\n * Minimal shape the store needs from a Google Drive client. Every\n * production Drive wrapper (`googleapis`, `gapi`, hand-rolled `fetch`\n * code) can expose this surface with a thin adapter.\n */\nexport interface DriveClient {\n  createFile(request: DriveCreateRequest): Promise<DriveFileMeta>\n  updateFile(fileId: string, request: DriveUpdateRequest): Promise<DriveFileMeta>\n  getFileMetadata(fileId: string): Promise<DriveFileMeta | null>\n  getFileBytes(fileId: string): Promise<Uint8Array | null>\n  deleteFile(fileId: string): Promise<void>\n  listFiles(query: DriveListQuery): Promise<DriveFileMeta[]>\n}\n\nexport interface DriveCreateRequest {\n  readonly name: string\n  readonly bytes: Uint8Array\n  readonly parents: readonly string[]\n  readonly mimeType?: string\n}\n\nexport interface DriveUpdateRequest {\n  readonly bytes: Uint8Array\n  readonly expectedRevision?: string | null\n}\n\nexport interface DriveListQuery {\n  readonly parents?: readonly string[]\n  readonly namePrefix?: string\n  readonly nameExact?: string\n  readonly mimeType?: string\n  readonly limit?: number\n}\n\nexport interface DriveFileMeta {\n  readonly id: string\n  readonly name: string\n  readonly headRevisionId: string\n  readonly size: number\n}\n\n// ── Handle registry ──────────────────────────────────────────────────────\n\nexport interface HandleStore {\n  getHandle(vaultId: string): Promise<DriveHandle | null>\n  setHandle(vaultId: string, handle: DriveHandle): Promise<void>\n  deleteHandle(vaultId: string): Promise<void>\n  /** Return every known { vaultId, handle } pair. Used by `listBundles()`. */\n  listHandles?(): Promise<Array<{ vaultId: string; handle: DriveHandle }>>\n}\n\nexport interface DriveHandle {\n  /** Stable Drive fileId. */\n  readonly fileId: string\n  /** ULID filename — what lives in Drive. */\n  readonly name: string\n}\n\n/**\n * In-memory handle store — fine for short-lived processes and tests.\n * Production consumers should persist handles to localStorage, IDB,\n * or a vault's `_sync_credentials` collection.\n */\nexport function memoryHandleStore(): HandleStore {\n  const map = new Map<string, DriveHandle>()\n  return {\n    async getHandle(vaultId) { return map.get(vaultId) ?? null },\n    async setHandle(vaultId, handle) { map.set(vaultId, handle) },\n    async deleteHandle(vaultId) { map.delete(vaultId) },\n    async listHandles() {\n      return [...map.entries()].map(([vaultId, handle]) => ({ vaultId, handle }))\n    },\n  }\n}\n\n// ── ULID generator (minimal, copy-free) ───────────────────────────────────\n\nconst ULID_ALPHABET = '0123456789ABCDEFGHJKMNPQRSTVWXYZ'\n\n/**\n * Generate a new ULID — 26 characters: 10 chars of timestamp (ms\n * granularity, sortable lexically when generated ≥ 1 ms apart) plus\n * 16 chars of entropy (80 bits).\n */\nexport function newUlid(): string {\n  const time = Date.now()\n  let timePart = ''\n  let t = time\n  for (let i = 0; i < 10; i++) {\n    timePart = ULID_ALPHABET[t % 32]! + timePart\n    t = Math.floor(t / 32)\n  }\n  // 16 chars of random → 16 bytes. 256 is a multiple of 32 so `byte % 32`\n  // produces a uniform distribution over the alphabet.\n  const rand = globalThis.crypto.getRandomValues(new Uint8Array(16))\n  let randPart = ''\n  for (const byte of rand) {\n    randPart += ULID_ALPHABET[byte % 32]\n  }\n  return timePart + randPart\n}\n\n// ── Options + factory ────────────────────────────────────────────────────\n\nexport interface DriveStoreOptions {\n  readonly drive: DriveClient\n  /**\n   * Parent folder id. Defaults to Drive's `appDataFolder` — hidden from\n   * the user, scoped to the app. Pass an explicit id to use a\n   * user-visible folder.\n   */\n  readonly parentId?: string\n  /** Handle registry — memory by default. Persist yourself in prod. */\n  readonly handles?: HandleStore\n  /** Bundle filename suffix. Default `'.noydb'`. */\n  readonly suffix?: string\n}\n\nconst APP_DATA_FOLDER = 'appDataFolder'\nconst DEFAULT_MIME = 'application/octet-stream'\n\nexport function drive(options: DriveStoreOptions): NoydbBundleStore {\n  const parentId = options.parentId ?? APP_DATA_FOLDER\n  const handles = options.handles ?? memoryHandleStore()\n  const suffix = options.suffix ?? '.noydb'\n  const { drive: client } = options\n\n  async function handleFor(vaultId: string): Promise<DriveHandle | null> {\n    return handles.getHandle(vaultId)\n  }\n\n  return {\n    kind: 'bundle',\n    name: 'google-drive',\n\n    async readBundle(vaultId) {\n      const handle = await handleFor(vaultId)\n      if (!handle) return null\n\n      const meta = await client.getFileMetadata(handle.fileId)\n      if (!meta) {\n        // Out-of-band deletion — clear the cached handle.\n        await handles.deleteHandle(vaultId)\n        return null\n      }\n      const bytes = await client.getFileBytes(handle.fileId)\n      if (!bytes) return null\n      return { bytes, version: meta.headRevisionId }\n    },\n\n    async writeBundle(vaultId, bytes, expectedVersion) {\n      const handle = await handleFor(vaultId)\n      if (!handle) {\n        if (expectedVersion !== null) {\n          throw new BundleVersionConflictError(\n            `No existing bundle for vault \"${vaultId}\" but expectedVersion=\"${expectedVersion}\" was supplied.`,\n          )\n        }\n        const name = `${newUlid()}${suffix}`\n        const meta = await client.createFile({\n          name,\n          bytes,\n          parents: [parentId],\n          mimeType: DEFAULT_MIME,\n        })\n        await handles.setHandle(vaultId, { fileId: meta.id, name: meta.name })\n        return { version: meta.headRevisionId }\n      }\n      const meta = await client.updateFile(handle.fileId, {\n        bytes,\n        expectedRevision: expectedVersion,\n      })\n      return { version: meta.headRevisionId }\n    },\n\n    async deleteBundle(vaultId) {\n      const handle = await handleFor(vaultId)\n      if (!handle) return\n      try {\n        await client.deleteFile(handle.fileId)\n      } catch {\n        // Already gone.\n      }\n      await handles.deleteHandle(vaultId)\n    },\n\n    async listBundles() {\n      if (handles.listHandles) {\n        const known = await handles.listHandles()\n        const out: Array<{ vaultId: string; version: string; size: number }> = []\n        for (const { vaultId, handle } of known) {\n          const meta = await client.getFileMetadata(handle.fileId)\n          if (!meta) continue\n          out.push({ vaultId, version: meta.headRevisionId, size: meta.size })\n        }\n        return out\n      }\n      // No handle index: fall back to Drive listing. This returns Drive\n      // file ids as \"vault ids\", which is imperfect — consumers are\n      // expected to either run a handle store or never call listBundles.\n      const files = await client.listFiles({ parents: [parentId], mimeType: DEFAULT_MIME })\n      return files\n        .filter(f => f.name.endsWith(suffix))\n        .map(f => ({ vaultId: f.name.slice(0, -suffix.length), version: f.headRevisionId, size: f.size }))\n    },\n  }\n}\n"],"mappings":";AAmDA,SAAS,kCAAkC;AAmEpC,SAAS,oBAAiC;AAC/C,QAAM,MAAM,oBAAI,IAAyB;AACzC,SAAO;AAAA,IACL,MAAM,UAAU,SAAS;AAAE,aAAO,IAAI,IAAI,OAAO,KAAK;AAAA,IAAK;AAAA,IAC3D,MAAM,UAAU,SAAS,QAAQ;AAAE,UAAI,IAAI,SAAS,MAAM;AAAA,IAAE;AAAA,IAC5D,MAAM,aAAa,SAAS;AAAE,UAAI,OAAO,OAAO;AAAA,IAAE;AAAA,IAClD,MAAM,cAAc;AAClB,aAAO,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,SAAS,OAAO,EAAE;AAAA,IAC5E;AAAA,EACF;AACF;AAIA,IAAM,gBAAgB;AAOf,SAAS,UAAkB;AAChC,QAAM,OAAO,KAAK,IAAI;AACtB,MAAI,WAAW;AACf,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,eAAW,cAAc,IAAI,EAAE,IAAK;AACpC,QAAI,KAAK,MAAM,IAAI,EAAE;AAAA,EACvB;AAGA,QAAM,OAAO,WAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AACjE,MAAI,WAAW;AACf,aAAW,QAAQ,MAAM;AACvB,gBAAY,cAAc,OAAO,EAAE;AAAA,EACrC;AACA,SAAO,WAAW;AACpB;AAkBA,IAAM,kBAAkB;AACxB,IAAM,eAAe;AAEd,SAAS,MAAM,SAA8C;AAClE,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,QAAQ,WAAW,kBAAkB;AACrD,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,EAAE,OAAO,OAAO,IAAI;AAE1B,iBAAe,UAAU,SAA8C;AACrE,WAAO,QAAQ,UAAU,OAAO;AAAA,EAClC;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IAEN,MAAM,WAAW,SAAS;AACxB,YAAM,SAAS,MAAM,UAAU,OAAO;AACtC,UAAI,CAAC,OAAQ,QAAO;AAEpB,YAAM,OAAO,MAAM,OAAO,gBAAgB,OAAO,MAAM;AACvD,UAAI,CAAC,MAAM;AAET,cAAM,QAAQ,aAAa,OAAO;AAClC,eAAO;AAAA,MACT;AACA,YAAM,QAAQ,MAAM,OAAO,aAAa,OAAO,MAAM;AACrD,UAAI,CAAC,MAAO,QAAO;AACnB,aAAO,EAAE,OAAO,SAAS,KAAK,eAAe;AAAA,IAC/C;AAAA,IAEA,MAAM,YAAY,SAAS,OAAO,iBAAiB;AACjD,YAAM,SAAS,MAAM,UAAU,OAAO;AACtC,UAAI,CAAC,QAAQ;AACX,YAAI,oBAAoB,MAAM;AAC5B,gBAAM,IAAI;AAAA,YACR,iCAAiC,OAAO,0BAA0B,eAAe;AAAA,UACnF;AAAA,QACF;AACA,cAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,MAAM;AAClC,cAAMA,QAAO,MAAM,OAAO,WAAW;AAAA,UACnC;AAAA,UACA;AAAA,UACA,SAAS,CAAC,QAAQ;AAAA,UAClB,UAAU;AAAA,QACZ,CAAC;AACD,cAAM,QAAQ,UAAU,SAAS,EAAE,QAAQA,MAAK,IAAI,MAAMA,MAAK,KAAK,CAAC;AACrE,eAAO,EAAE,SAASA,MAAK,eAAe;AAAA,MACxC;AACA,YAAM,OAAO,MAAM,OAAO,WAAW,OAAO,QAAQ;AAAA,QAClD;AAAA,QACA,kBAAkB;AAAA,MACpB,CAAC;AACD,aAAO,EAAE,SAAS,KAAK,eAAe;AAAA,IACxC;AAAA,IAEA,MAAM,aAAa,SAAS;AAC1B,YAAM,SAAS,MAAM,UAAU,OAAO;AACtC,UAAI,CAAC,OAAQ;AACb,UAAI;AACF,cAAM,OAAO,WAAW,OAAO,MAAM;AAAA,MACvC,QAAQ;AAAA,MAER;AACA,YAAM,QAAQ,aAAa,OAAO;AAAA,IACpC;AAAA,IAEA,MAAM,cAAc;AAClB,UAAI,QAAQ,aAAa;AACvB,cAAM,QAAQ,MAAM,QAAQ,YAAY;AACxC,cAAM,MAAiE,CAAC;AACxE,mBAAW,EAAE,SAAS,OAAO,KAAK,OAAO;AACvC,gBAAM,OAAO,MAAM,OAAO,gBAAgB,OAAO,MAAM;AACvD,cAAI,CAAC,KAAM;AACX,cAAI,KAAK,EAAE,SAAS,SAAS,KAAK,gBAAgB,MAAM,KAAK,KAAK,CAAC;AAAA,QACrE;AACA,eAAO;AAAA,MACT;AAIA,YAAM,QAAQ,MAAM,OAAO,UAAU,EAAE,SAAS,CAAC,QAAQ,GAAG,UAAU,aAAa,CAAC;AACpF,aAAO,MACJ,OAAO,OAAK,EAAE,KAAK,SAAS,MAAM,CAAC,EACnC,IAAI,QAAM,EAAE,SAAS,EAAE,KAAK,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,SAAS,EAAE,gBAAgB,MAAM,EAAE,KAAK,EAAE;AAAA,IACrG;AAAA,EACF;AACF;","names":["meta"]}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@noy-db/to-drive",
+  "version": "0.1.0-pre.3",
+  "description": "Google Drive bundle store for noy-db. Stores the whole vault as a single .noydb file in Drive's hidden appDataFolder; opaque ULID filenames never leak compartment names. Driver-agnostic — bring your own OAuth token.",
+  "license": "MIT",
+  "author": "vLannaAi <vicio@lanna.ai>",
+  "homepage": "https://github.com/vLannaAi/noy-db/tree/main/packages/to-drive#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vLannaAi/noy-db.git",
+    "directory": "packages/to-drive"
+  },
+  "bugs": {
+    "url": "https://github.com/vLannaAi/noy-db/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "peerDependencies": {
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@noy-db/hub": "0.1.0-pre.3"
+  },
+  "keywords": [
+    "noy-db",
+    "to-drive",
+    "google-drive",
+    "oauth",
+    "bundle",
+    "storage",
+    "zero-knowledge"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
+  }
+}