agentic-drive 0.1.0 → 0.2.0

package/dist/worker.js

@@ -1,5 +1,8 @@
 import {
-  ACTOR_KINDS,
+  backfillAuthorIds,
+  backfillResources
+} from "./chunk-3LISWG7H.js";
+import {
   DEFAULT_MAX_BYTES,
   DEFAULT_URL_SECONDS,
   DriveError,
@@ -8,14 +11,16 @@ import {
   publicNode,
   safeMime,
   upload
-} from "./chunk-QRGKXPLX.js";
+} from "./chunk-6CWBHSJ7.js";
 
 // src/worker.ts
 import { Hono } from "hono";
-import { parseRegion } from "agentic-identity";
 import { D1_SCHEMA, createD1Store, createR2Blobs, verifySignedBlobUrl } from "agentic-identity/cloudflare";
-var MIN_TOKEN_LENGTH = 32;
+import { createSharing, createStoreAuth, parseRegion } from "agentic-identity";
 var STATUS = {
+  CROSS_DRIVE: 409,
+  INVALID_SHARE: 400,
+  TOO_MANY_ITEMS: 409,
   TOO_DEEP: 400,
   INVALID_EXPIRY: 400,
   BUSY: 409,
@@ -37,35 +42,10 @@ var STATUS = {
   TOO_LARGE: 413
 };
 var fail = (code, message, status) => new Response(JSON.stringify({ error: { code, message } }), { status, headers: { "content-type": "application/json" } });
-function sameText(a, b) {
-  const x = new TextEncoder().encode(a);
-  const y = new TextEncoder().encode(b);
-  let diff = x.length ^ y.length;
-  for (let i = 0; i < Math.max(x.length, y.length); i++) diff |= (x[i] ?? 0) ^ (y[i] ?? 0);
-  return diff === 0;
-}
-var isText = (v) => typeof v === "string" && v !== "";
-function principalOf(grant) {
-  if (typeof grant !== "object" || grant === null) return null;
-  const { owner, actor, kind } = grant;
-  if (!isText(owner) || !isText(actor) || !ACTOR_KINDS.includes(kind)) return null;
-  return { owner, actor: { id: actor, kind } };
-}
-function authenticate(request, env) {
-  const token = /^Bearer (.+)$/.exec(request.headers.get("authorization") ?? "")?.[1];
-  if (!token || !env.DRIVE_API_TOKENS) return null;
-  let grants;
-  try {
-    grants = JSON.parse(env.DRIVE_API_TOKENS);
-  } catch {
-    return null;
-  }
-  if (typeof grants !== "object" || grants === null) return null;
-  let found;
-  for (const [candidate, grant] of Object.entries(grants)) {
-    if (sameText(candidate, token) && candidate.length >= MIN_TOKEN_LENGTH) found = grant;
-  }
-  return principalOf(found);
+async function authenticate(request, store, now) {
+  if (!/^Bearer [A-Za-z0-9_-]{1,512}$/.test(request.headers.get("authorization") ?? "")) return null;
+  const principal = await createStoreAuth(store, now ? { now } : {}).authenticate(request);
+  return principal ? { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal } : null;
 }
 var schemas = /* @__PURE__ */ new WeakMap();
 function settings(env) {
@@ -92,7 +72,8 @@ async function driveFor(env, config) {
     schemas.set(env.DB, ready);
   }
   await ready;
-  return createDrive({ store: createD1Store(env.DB, { region: regionOf(env) }), blobs: blobsFor(env, config) });
+  const store = createD1Store(env.DB, { region: regionOf(env) });
+  return { store, drive: createDrive({ store, blobs: blobsFor(env, config), sharing: createSharing(store) }) };
 }
 var number = (v, name) => {
   if (v === void 0) return void 0;
@@ -108,10 +89,12 @@ function createApp() {
   api.use("*", async (c, next) => {
     const config = settings(c.env);
     if (!config) return fail("NOT_CONFIGURED", "set DRIVE_PUBLIC_URL and DRIVE_URL_SECRET (32 bytes or more)", 503);
-    const ctx = authenticate(c.req.raw, c.env);
+    const { drive, store } = await driveFor(c.env, config);
+    const ctx = await authenticate(c.req.raw, store);
     if (!ctx) return fail("UNAUTHORIZED", "send a valid bearer token", 401);
     c.set("ctx", ctx);
-    c.set("drive", await driveFor(c.env, config));
+    c.set("drive", drive);
+    c.set("store", store);
     await next();
   });
   const q = (c, k) => c.req.query(k);
@@ -187,15 +170,25 @@ function createApp() {
       minSize: number(q(c, "minSize"), "minSize"),
       maxSize: number(q(c, "maxSize"), "maxSize"),
       createdByKind: q(c, "createdByKind"),
+      app: q(c, "app"),
       limit: number(q(c, "limit"), "limit")
     };
     return c.json((await c.var.drive.search(c.var.ctx, query)).map((r) => publicNode(r.node, r.path)));
   });
   api.get("/export", async (c) => new Response(await buildExport(c.var.drive, c.var.ctx), { headers: { "content-type": "application/zip", "content-disposition": 'attachment; filename="drive-export.zip"' } }));
   api.delete("/account", async (c) => {
-    if (q(c, "confirm") !== "yes") throw new DriveError("INVALID_PATH", "add ?confirm=yes to delete everything you own for good");
-    return c.json(await c.var.drive.deleteAll(c.var.ctx));
+    if (q(c, "confirm") !== "yes") throw new DriveError("INVALID_PATH", "add ?confirm=yes to erase you for good: your drive, and what you shared or held");
+    return c.json(await c.var.drive.erasePerson(c.var.ctx));
   });
+  api.get("/home", async (c) => {
+    const home = await c.var.drive.home(c.var.ctx, { app: q(c, "app"), limit: number(q(c, "limit"), "limit") });
+    return c.json({ apps: home.apps, files: home.files, items: home.items.map((i) => ({ ...publicNode(i.node, i.path), app: i.app })) });
+  });
+  api.post("/documents", async (c) => {
+    const b = await body(c);
+    return c.json(publicNode(await c.var.drive.registerDocument(c.var.ctx, { ref: str(b.ref, "ref"), name: str(b.name, "name"), folder: opt(b.folder, "folder") })), 201);
+  });
+  api.delete("/documents", async (c) => c.json(await c.var.drive.forgetDocument(c.var.ctx, need(q(c, "ref"), "ref"))));
   app2.get("/api/v1/drive/blob", async (c) => {
     const config = settings(c.env);
     if (!config) return fail("NOT_CONFIGURED", "set DRIVE_PUBLIC_URL and DRIVE_URL_SECRET (32 bytes or more)", 503);
@@ -212,6 +205,88 @@ function createApp() {
       }
     });
   });
+  const roleOf = (v) => v;
+  const lifetime = (v, name) => {
+    if (v === void 0) return void 0;
+    if (typeof v !== "number") throw new DriveError("INVALID_SHARE", `${name} must be a number of milliseconds`);
+    return v;
+  };
+  api.get("/shares", async (c) => c.json(await c.var.drive.shares(c.var.ctx, need(q(c, "path"), "path"))));
+  api.post("/shares", async (c) => {
+    const b = await body(c);
+    await c.var.drive.shareWith(c.var.ctx, str(b.path, "path"), str(b.subjectId, "subjectId"), roleOf(b.role));
+    return c.json({ ok: true });
+  });
+  api.delete("/shares", async (c) => {
+    await c.var.drive.unshare(c.var.ctx, need(q(c, "path"), "path"), need(q(c, "subjectId"), "subjectId"));
+    return c.json({ ok: true });
+  });
+  api.post("/invites", async (c) => {
+    const b = await body(c);
+    const expiresInMs = lifetime(b.expiresInMs, "expiresInMs");
+    const invite = await c.var.drive.invite(c.var.ctx, str(b.path, "path"), {
+      role: roleOf(b.role),
+      ...b.email === void 0 ? {} : { email: str(b.email, "email") },
+      ...b.handle === void 0 ? {} : { handle: str(b.handle, "handle") },
+      ...expiresInMs === void 0 ? {} : { expiresInMs }
+    });
+    return c.json(invite, 201);
+  });
+  api.post("/invites/accept", async (c) => {
+    const id = str((await body(c)).id, "id");
+    const user = await c.var.store.get("users", c.var.ctx.actor.id);
+    const agent = await c.var.store.get("principals", c.var.ctx.actor.id);
+    await c.var.drive.acceptInvite(c.var.ctx, id, {
+      ...user?.emailVerified === true && typeof user.email === "string" ? { email: user.email } : {},
+      ...typeof agent?.handle === "string" ? { handle: agent.handle } : {}
+    });
+    return c.json({ ok: true });
+  });
+  api.post("/links", async (c) => {
+    const b = await body(c);
+    const expiresInMs = lifetime(b.expiresInMs, "expiresInMs");
+    const link = await c.var.drive.createLink(c.var.ctx, str(b.path, "path"), {
+      role: roleOf(b.role),
+      signedInOnly: b.signedInOnly === true,
+      ...expiresInMs === void 0 ? {} : { expiresAt: Date.now() + expiresInMs }
+    });
+    return c.json(link, 201);
+  });
+  api.delete("/links", async (c) => {
+    await c.var.drive.revokeLink(c.var.ctx, need(q(c, "id"), "id"));
+    return c.json({ ok: true });
+  });
+  const shared = new Hono();
+  const visit = async (c) => {
+    const config = settings(c.env);
+    if (!config) return { stop: fail("NOT_CONFIGURED", "set DRIVE_PUBLIC_URL and DRIVE_URL_SECRET (32 bytes or more)", 503) };
+    const { drive, store } = await driveFor(c.env, config);
+    const ctx = await authenticate(c.req.raw, store);
+    if (!ctx && c.req.header("authorization")) return { stop: fail("UNAUTHORIZED", "send a valid bearer token", 401) };
+    return { drive, principal: ctx?.principal ?? null, token: c.req.header("x-link-token") };
+  };
+  shared.get("/:id", async (c) => {
+    const v = await visit(c);
+    return "stop" in v ? v.stop : c.json(publicNode(await v.drive.openShared(v.principal, c.req.param("id"), v.token)));
+  });
+  shared.get("/:id/items", async (c) => {
+    const v = await visit(c);
+    return "stop" in v ? v.stop : c.json((await v.drive.listShared(v.principal, c.req.param("id"), v.token)).map((n) => publicNode(n)));
+  });
+  shared.get("/:id/content", async (c) => {
+    const v = await visit(c);
+    if ("stop" in v) return v.stop;
+    const { node, data } = await v.drive.readShared(v.principal, c.req.param("id"), v.token);
+    return new Response(data, {
+      headers: {
+        "content-type": safeMime(node.mime),
+        "content-disposition": `attachment; filename*=UTF-8''${encodeURIComponent(node.name)}`,
+        "x-content-type-options": "nosniff",
+        "cache-control": "private, no-store"
+      }
+    });
+  });
+  app2.route("/api/v1/drive/shared", shared);
   app2.route("/api/v1/drive", api);
   app2.notFound(() => fail("NOT_FOUND", "no such route", 404));
   app2.onError((error) => {
@@ -225,6 +300,8 @@ var app = createApp();
 var worker_default = { fetch: (request, env, ctx) => app.fetch(request, env, ctx) };
 export {
   authenticate,
+  backfillAuthorIds,
+  backfillResources,
   createApp,
   worker_default as default
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-drive",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Store, sort, and share files and folders.",
   "keywords": [
     "drive",
@@ -28,6 +28,7 @@
   "files": [
     "dist",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE",
     "llms.txt",
     "SKILL.md"
@@ -53,11 +54,12 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "clean": "rm -rf dist",
+    "prepack": "npm run build --silent >&2",
     "ci:local": "npm run build && npm run typecheck && npm test"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
-    "agentic-identity": "^0.2.0",
+    "agentic-identity": "^0.3.0",
     "hono": "^4.13.14",
     "zod": "^3.25.0"
   },

package/dist/drive-DRQ8LiHl.d.ts

@@ -1,144 +0,0 @@
-import { Store, Blobs } from 'agentic-identity';
-
-declare const ROOT_ID = "root";
-declare const ACTOR_KINDS: readonly ["human", "agent_of_human", "agent_of_agent", "agent", "user_token"];
-type ActorKind = (typeof ACTOR_KINDS)[number];
-type Actor = {
-    id: string;
-    kind: ActorKind;
-};
-/** `owner` is the drive's owner. `actor` is who acts for them. */
-type Ctx = {
-    owner: string;
-    actor: Actor;
-};
-type Action = "read" | "write" | "delete";
-/** The seam for sharing. A later release swaps this for a role check. */
-type Can = (ctx: Ctx, action: Action, node: Node) => boolean | Promise<boolean>;
-type Node = {
-    id: string;
-    owner: string;
-    parentId: string;
-    kind: "folder" | "file" | "ref";
-    name: string;
-    nameKey: string;
-    size: number;
-    mime: string | null;
-    hash: string | null;
-    /** A typed reference such as `docs:<id>`. Set when kind is "ref". */
-    ref: string | null;
-    blobKey: string | null;
-    createdAt: number;
-    updatedAt: number;
-    createdBy: Actor;
-    updatedBy: Actor;
-    trashed: boolean;
-    trashedAt: number | null;
-    /** Set while a purge deletes the item. Nothing can see or change it then. */
-    purging: boolean;
-};
-type ErrorCode = "NOT_FOUND" | "NAME_TAKEN" | "BLOB_EXISTS" | "INVALID_NAME" | "INVALID_PATH" | "INVALID_REF" | "NOT_A_FOLDER" | "NOT_A_FILE" | "MOVE_INTO_SELF" | "TOO_DEEP" | "PARENT_GONE" | "TRASHED" | "NOT_TRASHED" | "IS_ROOT" | "FORBIDDEN" | "BLOB_MISSING" | "TOO_LARGE" | "INVALID_EXPIRY" | "BUSY";
-declare class DriveError extends Error {
-    readonly code: ErrorCode;
-    constructor(code: ErrorCode, message: string);
-}
-interface SearchQuery {
-    /** Part of the name. Case and Unicode form do not matter. */
-    name?: string;
-    /** An exact type, or a family such as `image/*`. */
-    mime?: string;
-    kind?: Node["kind"];
-    minSize?: number;
-    maxSize?: number;
-    /** Items first made by this kind of actor, such as `agent_of_human`. */
-    createdByKind?: ActorKind;
-    /** At most this many results. Defaults to 100. */
-    limit?: number;
-}
-type OnConflict = "fail" | "rename" | "replace";
-interface DriveDeps {
-    store: Store;
-    blobs: Blobs;
-    now?: () => number;
-    newId?: () => string;
-    can?: Can;
-    /** Most parent steps any ancestor walk takes. A walk that hits it fails closed. */
-    maxDepth?: number;
-    /** Called with a blob key that no node points at and that could not be deleted. */
-    onOrphan?: (key: string, error: unknown) => void;
-}
-type Drive = ReturnType<typeof createDrive>;
-/** Validates a name. Names are NFC-normalized. Two names clash when their keys match. */
-declare function parseName(raw: string): {
-    name: string;
-    key: string;
-};
-declare function createDrive(deps: DriveDeps): {
-    stat(ctx: Ctx, loc: string): Promise<Node>;
-    /** Live children, sorted by name. */
-    list(ctx: Ctx, loc?: string): Promise<Node[]>;
-    mkdir(ctx: Ctx, path: string, opts?: {
-        parents?: boolean;
-    }): Promise<Node>;
-    /**
-     * Stores one blob and one node. The blob is written first. The new node commits before
-     * any old blob goes. A failed old-blob delete leaves an orphan and never undoes the commit.
-     */
-    putFile(ctx: Ctx, path: string, data: Uint8Array, opts?: {
-        mime?: string;
-        parents?: boolean;
-        onConflict?: OnConflict;
-    }): Promise<Node>;
-    /** A reference points at a document in another app, such as `docs:<id>`. */
-    putRef(ctx: Ctx, path: string, ref: string, opts?: {
-        parents?: boolean;
-        onConflict?: OnConflict;
-    }): Promise<Node>;
-    read(ctx: Ctx, loc: string): Promise<{
-        node: Node;
-        data: Uint8Array;
-        contentType?: string;
-    }>;
-    /**
-     * A time-limited URL to fetch the bytes. The URL signs an attachment header and the stored
-     * type, so the link holder cannot change how the bytes are served. Trashing an item does
-     * not revoke a link already issued.
-     */
-    downloadUrl(ctx: Ctx, loc: string, expiresInSeconds?: number): Promise<string>;
-    move(ctx: Ctx, src: string, destLoc: string, opts?: {
-        name?: string;
-        onConflict?: OnConflict;
-    }): Promise<Node>;
-    rename(ctx: Ctx, loc: string, name: string): Promise<Node>;
-    /** Hides an item and, for a folder, everything under it. Nothing else changes. */
-    trash(ctx: Ctx, loc: string): Promise<Node>;
-    /** Items trashed on their own, newest first. */
-    listTrash(ctx: Ctx): Promise<Node[]>;
-    /** Puts a trashed item back. It needs a live parent folder. */
-    restore(ctx: Ctx, id: string, opts?: {
-        parentId?: string;
-        onConflict?: OnConflict;
-    }): Promise<Node>;
-    /** Live items that match every field given, sorted by path. */
-    search(ctx: Ctx, q?: SearchQuery): Promise<{
-        node: Node;
-        path: string;
-    }[]>;
-    /** Every item of the owner, trashed or not, with its original path and bytes. For export. */
-    exportData(ctx: Ctx): Promise<{
-        node: Node;
-        path: string;
-        data: Uint8Array | null;
-        missing: boolean;
-    }[]>;
-    /** Deletes every item and blob of the owner for good. Only the owner may do this, never an agent for them. A failed call can run again. */
-    deleteAll(ctx: Ctx): Promise<{
-        removed: number;
-    }>;
-    /** Deletes a trashed item for good, with everything under it and all their bytes. */
-    purge(ctx: Ctx, id: string): Promise<{
-        removed: number;
-    }>;
-};
-
-export { type ActorKind as A, type Ctx as C, type Drive as D, type ErrorCode as E, type Node as N, type OnConflict as O, ROOT_ID as R, type SearchQuery as S, type Actor as a, ACTOR_KINDS as b, type Action as c, type Can as d, type DriveDeps as e, DriveError as f, createDrive as g, parseName as p };