agentic-drive 0.11.1 → 0.13.0

package/dist/embed.js

@@ -1,12 +1,12 @@
 import {
   DriveApiError,
   createClient
-} from "./chunk-SEHT5Q5L.js";
+} from "./chunk-TGOARFYZ.js";
 
 // ui/embed.tsx
-import { useEffect as useEffect3, useState as useState3 } from "react";
+import { useEffect as useEffect3, useRef as useRef3, useState as useState3 } from "react";
 import { createRoot } from "react-dom/client";
-import { FolderIcon as FolderIcon3, SidebarNav as SidebarNav2, ToastProvider, TooltipProvider } from "agentic-design/react";
+import { FolderIcon as FolderIcon3, SidebarNav as SidebarNav2, ToastProvider, TooltipProvider, useToast as useToast2 } from "agentic-design/react";
 
 // ui/App.tsx
 import { useEffect as useEffect2, useMemo, useRef as useRef2, useState as useState2 } from "react";
@@ -183,11 +183,9 @@ function useLoad(fn) {
   const [state, set] = useState2({ status: "loading" });
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
-    let live = true;
-    fn().then((data) => live && set({ status: "ok", data }), (e) => live && set({ status: "error", error: errorText(e) }));
-    return () => {
-      live = false;
-    };
+    const pending = new AbortController();
+    fn(pending.signal).then((data) => !pending.signal.aborted && set({ status: "ok", data }), (e) => !pending.signal.aborted && set({ status: "error", error: errorText(e) }));
+    return () => pending.abort();
   }, [tick]);
   return [state, () => setTick((n) => n + 1)];
 }
@@ -200,18 +198,14 @@ function Status({ state, retry, children }) {
   return /* @__PURE__ */ jsx3(Fragment, { children });
 }
 var routeParts = (hash) => hash.replace(/^#\/?/, "").split("/");
-var goHash = (loc) => {
-  history.replaceState(null, "", `#/${loc}`);
-  dispatchEvent(new HashChangeEvent("hashchange"));
-};
-function Routes({ hash, client, origin, go, onOpenItem }) {
+function Routes({ hash, client, origin, go, onOpenItem, folderLoc }) {
   const parts = routeParts(hash);
   if (parts[0] === "trash") return /* @__PURE__ */ jsx3(TrashView, { client }, "trash");
   if (parts[0] === "a" && parts[1]) return /* @__PURE__ */ jsx3(ActivityView, { client, id: parts[1] }, hash);
   if (parts[0] === "f" && parts[1]) return /* @__PURE__ */ jsx3(Download, { client, id: parts[1], origin, go }, hash);
-  return /* @__PURE__ */ jsx3(Browser, { client, loc: parts[0] || "/", origin, onOpenItem }, hash);
+  return /* @__PURE__ */ jsx3(Browser, { client, loc: folderLoc ?? (parts[0] || "/"), go, origin, onOpenItem }, hash);
 }
-function Browser({ client, loc, origin, onOpenItem }) {
+function Browser({ client, loc, origin, onOpenItem, go }) {
   const openItem = (e, item) => {
     if (e.defaultPrevented || e.button !== 0 || e.metaKey || e.ctrlKey || e.shiftKey || e.altKey || item.kind !== "ref") return;
     if (onOpenItem?.(item) === true) e.preventDefault();
@@ -299,7 +293,7 @@ function Browser({ client, loc, origin, onOpenItem }) {
       /* @__PURE__ */ jsx3(Menu, { align: "end", trigger: /* @__PURE__ */ jsx3(IconButton, { label: `Actions for ${item.name}`, icon: /* @__PURE__ */ jsx3(MoreIcon, {}), variant: "ghost" }), items: [
         { label: "Rename", onSelect: () => setDlg({ kind: "rename", item }) },
         { label: "Move", onSelect: () => setDlg({ kind: "move", item }) },
-        { label: "Activity", onSelect: () => goHash(`a/${item.id}`) },
+        { label: "Activity", onSelect: () => go(`a/${item.id}`) },
         { label: "Share", onSelect: () => setDlg({ kind: "share", item }) },
         "separator",
         { label: "Move to trash", danger: true, onSelect: () => void act(() => client.trash(item.id), `Moved ${item.name} to trash`) }
@@ -508,16 +502,23 @@ function ActivityView({ client, id }) {
     /* @__PURE__ */ jsx3(ActivityList, { entries: state.data.entries })
   ] }) }) });
 }
+async function downloadItem(client, id, origin, signal) {
+  const item = await client.stat(id, { signal });
+  signal.throwIfAborted();
+  const { url } = await client.url(id, void 0, { signal });
+  signal.throwIfAborted();
+  if (new URL(url, origin).origin !== origin) throw new Error("The download link points to another site.");
+  const a = document.createElement("a");
+  a.href = url;
+  a.download = item.name;
+  a.click();
+  return item;
+}
 function Download({ client, id, origin, go }) {
-  const [state, retry] = useLoad(async () => {
-    const item = await client.stat(id);
-    const { url } = await client.url(id);
-    if (new URL(url, origin).origin !== origin) throw new Error("The download link points to another site.");
-    const a = document.createElement("a");
-    a.href = url;
-    a.download = item.name;
-    a.click();
-    go(item.parentId);
+  const [state, retry] = useLoad(async (signal) => {
+    const item = await downloadItem(client, id, origin, signal);
+    signal.throwIfAborted();
+    go(item.parentId, { replace: true });
     return item;
   });
   return /* @__PURE__ */ jsx3(Status, { state, retry, children: null });
@@ -525,6 +526,22 @@ function Download({ client, id, origin, go }) {
 
 // ui/embed.tsx
 import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+var ROOT = { kind: "folder", path: "/" };
+function locationHash(location2) {
+  if (location2.kind === "folder" && typeof location2.path === "string" && location2.path.length)
+    return `#/folder/${encodeURIComponent(location2.path)}`;
+  if (location2.kind === "trash") return "#/trash";
+  if ((location2.kind === "activity" || location2.kind === "file") && typeof location2.itemId === "string" && location2.itemId.length)
+    return `#/${location2.kind === "activity" ? "a" : "f"}/${encodeURIComponent(location2.itemId)}`;
+  throw new TypeError("Invalid drive location");
+}
+function fromHash(hash) {
+  const path = hash.slice(2);
+  if (path === "trash") return { kind: "trash" };
+  if (path.startsWith("a/")) return { kind: "activity", itemId: path.slice(2) };
+  if (path.startsWith("f/")) return { kind: "file", itemId: path.slice(2) };
+  return { kind: "folder", path: path || "/" };
+}
 var PLACEHOLDER = "from-get-token";
 function makeClient({ baseUrl, getToken }) {
   if (typeof getToken !== "function") throw new TypeError("getToken must be a function");
@@ -543,24 +560,48 @@ function makeClient({ baseUrl, getToken }) {
   return { client: createClient({ baseUrl, token: PLACEHOLDER, fetch: fetchWithToken }), close: () => closed.abort() };
 }
 var clients = 0;
-function DriveBrowser({ baseUrl, getToken, onOpenItem }) {
+function DriveBrowser({ baseUrl, getToken, onOpenItem, location: location2, onNavigate }) {
+  const [local, setLocal] = useState3(ROOT);
+  const active = location2 ?? local;
+  locationHash(active);
+  const navigate = (next, options = { replace: false }) => {
+    if (location2 === void 0) setLocal(next);
+    onNavigate?.(next, options);
+  };
   const [made, setMade] = useState3();
   useEffect3(() => {
     const next = makeClient({ baseUrl, getToken });
     setMade({ id: ++clients, client: next.client, origin: new URL(baseUrl).origin });
     return () => next.close();
   }, [baseUrl, getToken]);
-  return made ? /* @__PURE__ */ jsx4(DriveView, { client: made.client, origin: made.origin, onOpenItem }, made.id) : null;
+  return made ? /* @__PURE__ */ jsx4(DriveView, { client: made.client, origin: made.origin, onOpenItem, location: active, onNavigate: navigate }, made.id) : null;
 }
-function DriveView({ client, origin, onOpenItem }) {
-  const [hash, setHash] = useState3("#/");
-  const go = (loc) => setHash(`#/${loc === "/" ? "" : loc}`);
+function DriveView({ client, origin, onOpenItem, location: location2, onNavigate }) {
+  const hash = locationHash(location2);
+  const toast = useToast2();
+  const pending = useRef3(new AbortController());
+  useEffect3(() => {
+    const controller = new AbortController();
+    pending.current = controller;
+    return () => controller.abort();
+  }, [hash]);
+  const download = async (id) => {
+    const signal = pending.current.signal;
+    try {
+      await downloadItem(client, id, origin, signal);
+    } catch (e) {
+      if (!signal.aborted) toast({ title: "Could not download", description: e instanceof DriveApiError ? `${e.message} (${e.code})` : e instanceof Error ? e.message : "Download failed", tone: "danger" });
+    }
+  };
+  const go = (loc, options = { replace: false }) => onNavigate(fromHash(`#/${loc === "/" || loc === "root" ? "" : loc}`), options);
   const follow = (e) => {
     if (e.defaultPrevented || e.button !== 0 || e.metaKey || e.ctrlKey || e.shiftKey || e.altKey) return;
     const link = e.target.closest?.("a[href^='#/']");
     if (!link || !e.currentTarget.contains(link)) return;
     e.preventDefault();
-    setHash(link.getAttribute("href"));
+    const next = fromHash(link.getAttribute("href"));
+    if (next.kind === "file") void download(next.itemId);
+    else onNavigate(next, { replace: false });
   };
   const place = hash.startsWith("#/trash") ? "trash" : "files";
   return /* @__PURE__ */ jsxs4("div", { className: "drive-root", onClick: follow, children: [
@@ -568,26 +609,45 @@ function DriveView({ client, origin, onOpenItem }) {
       { href: "#/", label: "My files", icon: /* @__PURE__ */ jsx4(FolderIcon3, { "aria-hidden": "true" }), current: place === "files" },
       { href: "#/trash", label: "Trash", current: place === "trash" }
     ] }),
-    /* @__PURE__ */ jsx4("div", { className: "drive-main", children: /* @__PURE__ */ jsx4(Routes, { hash, client, origin, go, onOpenItem }) })
+    /* @__PURE__ */ jsx4("div", { className: "drive-main", children: /* @__PURE__ */ jsx4(Routes, { hash, client, origin, go, onOpenItem, folderLoc: location2.kind === "folder" ? location2.path : void 0 }) })
   ] });
 }
 function mount(element, options) {
+  let active = { ...options.location ?? ROOT };
+  locationHash(active);
+  let settings = options;
   let current = makeClient(options);
   const root = createRoot(element);
   let open = true;
   let version = 0;
+  const navigate = (next, options2 = { replace: false }) => {
+    active = { ...next };
+    render(settings, current.client);
+    settings.onNavigate?.({ ...active }, options2);
+  };
   const render = (next, client) => root.render(
-    /* @__PURE__ */ jsx4(TooltipProvider, { children: /* @__PURE__ */ jsx4(ToastProvider, { children: /* @__PURE__ */ jsx4(DriveView, { client, origin: new URL(next.baseUrl).origin, onOpenItem: next.onOpenItem }, version++) }) })
+    /* @__PURE__ */ jsx4(TooltipProvider, { children: /* @__PURE__ */ jsx4(ToastProvider, { children: /* @__PURE__ */ jsx4(DriveView, { client, origin: new URL(next.baseUrl).origin, onOpenItem: next.onOpenItem, location: active, onNavigate: navigate }, version) }) })
   );
   render(options, current.client);
   return {
     update: (next) => {
       if (!open) return;
+      if (next.location !== void 0) locationHash(next.location);
       const made = makeClient(next);
+      settings = next;
+      if (next.location !== void 0) active = { ...next.location };
+      version++;
       current.close();
       current = made;
       render(next, made.client);
     },
+    setLocation: (next) => {
+      if (!open) return;
+      locationHash(next);
+      active = { ...next };
+      render(settings, current.client);
+    },
+    getLocation: () => ({ ...active }),
     unmount: () => {
       if (!open) return;
       open = false;

package/dist/index.d.ts

@@ -1,5 +1,6 @@
-import { O as OnConflict, D as Drive, C as Ctx, N as Node, A as Actor } from './drive-CS1CLfqo.js';
-export { a as ACTOR_KINDS, b as Action, c as ActivityAction, d as ActivityEntry, e as ActorKind, f as Can, g as DriveDeps, h as DriveError, E as ERROR_STATUS, i as ErrorCode, R as ROOT_ID, S as SearchQuery, j as createDrive, p as parseName, k as parseSubject, s as subjectKindOf } from './drive-CS1CLfqo.js';
+import { O as OnConflict, D as Drive, C as Ctx, N as Node, R as ResourceOwnership, A as Actor } from './drive-BncyFxBL.js';
+export { a as ACTOR_KINDS, b as Action, c as ActivityAction, d as ActivityEntry, e as ActorKind, f as Can, g as DriveDeps, h as DriveError, E as ERROR_STATUS, i as ErrorCode, j as ROOT_ID, S as SearchQuery, k as createDrive, p as parseName, l as parseSubject, s as subjectKindOf } from './drive-BncyFxBL.js';
+import * as agentic_identity from 'agentic-identity';
 import { Store, Blobs, Doc } from 'agentic-identity';
 export { B as BackfillOptions, a as BackfillResult, b as backfillAuthorIds, c as backfillResources } from './migrate-B79gRPMu.js';
 export { DriveAccount, DriveAccountDeps, driveAccount } from './account.js';
@@ -76,6 +77,9 @@ declare function revokeKey(store: Store, token: string): Promise<void>;
 /** A node as the CLI and MCP print it: no storage keys. `machineMade` is true when the creator is not a human principal. */
 declare function publicNode(node: Node, path?: string): {
     machineMade: boolean;
+    resourceOwnership?: ResourceOwnership;
+    resourceOwnerId?: string;
+    resourceOwnerKind?: agentic_identity.SubjectKind;
     id: string;
     owner: string;
     parentId: string;
@@ -95,6 +99,9 @@ declare function publicNode(node: Node, path?: string): {
     trashedAt: number | null;
 } | {
     machineMade: boolean;
+    resourceOwnership?: ResourceOwnership;
+    resourceOwnerId?: string;
+    resourceOwnerKind?: agentic_identity.SubjectKind;
     id: string;
     owner: string;
     parentId: string;
@@ -115,4 +122,4 @@ declare function publicNode(node: Node, path?: string): {
     path: string;
 };
 
-export { Actor, AuthError, Ctx, DEFAULT_MAX_BYTES, Drive, Node, OnConflict, type UploadOptions, VERSION, addPrincipal, buildExport, importLegacyLocal, issueKey, openLocal, publicNode, readZip, resolveToken, revokeKey, revokePrincipal, sniffMime, upload, writeZip };
+export { Actor, AuthError, Ctx, DEFAULT_MAX_BYTES, Drive, Node, OnConflict, ResourceOwnership, type UploadOptions, VERSION, addPrincipal, buildExport, importLegacyLocal, issueKey, openLocal, publicNode, readZip, resolveToken, revokeKey, revokePrincipal, sniffMime, upload, writeZip };

package/dist/index.js

@@ -1,12 +1,12 @@
 import {
   driveAccount
-} from "./chunk-ECVUDAHL.js";
+} from "./chunk-OHDNQ23Q.js";
 import {
   importLegacyLocal
 } from "./chunk-AB2RTTHJ.js";
 import {
   VERSION
-} from "./chunk-W27ZQYPT.js";
+} from "./chunk-6TPC3BUW.js";
 import {
   DEFAULT_MAX_BYTES,
   buildExport,
@@ -14,7 +14,7 @@ import {
   sniffMime,
   upload,
   writeZip
-} from "./chunk-HJXRMOUY.js";
+} from "./chunk-NPJG2MYP.js";
 import {
   ACTOR_KINDS,
   AuthError,
@@ -34,7 +34,7 @@ import {
   revokeKey,
   revokePrincipal,
   subjectKindOf
-} from "./chunk-DB4F5EWD.js";
+} from "./chunk-FTIWCBCI.js";
 export {
   ACTOR_KINDS,
   AuthError,

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { D as Drive, C as Ctx } from './drive-CS1CLfqo.js';
+import { D as Drive, C as Ctx } from './drive-BncyFxBL.js';
 import { Store } from 'agentic-identity';
 
 declare function createMcpServer(drive: Drive, ctx: Ctx, exportDir: string, store: Store): McpServer;

package/dist/mcp.js

@@ -1,16 +1,16 @@
 import {
   VERSION
-} from "./chunk-W27ZQYPT.js";
+} from "./chunk-6TPC3BUW.js";
 import {
   buildExport,
   upload
-} from "./chunk-HJXRMOUY.js";
+} from "./chunk-NPJG2MYP.js";
 import {
   ACTOR_KINDS,
   DriveError,
   inviteIdentity,
   publicNode
-} from "./chunk-DB4F5EWD.js";
+} from "./chunk-FTIWCBCI.js";
 
 // src/mcp.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/worker.d.ts

@@ -1,8 +1,8 @@
 import { Hono } from 'hono';
 import { D1Like, R2Like } from 'agentic-identity/cloudflare';
 import { Store, Blobs } from 'agentic-identity';
-import { C as Ctx, D as Drive } from './drive-CS1CLfqo.js';
-export { E as ERROR_STATUS, i as ErrorCode, N as Node } from './drive-CS1CLfqo.js';
+import { C as Ctx, D as Drive } from './drive-BncyFxBL.js';
+export { E as ERROR_STATUS, i as ErrorCode, N as Node } from './drive-BncyFxBL.js';
 export { B as BackfillOptions, a as BackfillResult, b as backfillAuthorIds, c as backfillResources } from './migrate-B79gRPMu.js';
 
 /**

package/dist/worker.js

@@ -2,7 +2,7 @@ import {
   DEFAULT_MAX_BYTES,
   buildExport,
   upload
-} from "./chunk-HJXRMOUY.js";
+} from "./chunk-NPJG2MYP.js";
 import {
   DEFAULT_URL_SECONDS,
   DriveError,
@@ -14,7 +14,7 @@ import {
   inviteIdentity,
   publicNode,
   safeMime
-} from "./chunk-DB4F5EWD.js";
+} from "./chunk-FTIWCBCI.js";
 
 // src/worker.ts
 import { Hono } from "hono";

package/llms.txt

@@ -39,7 +39,7 @@ checks), `upload`, `sniffMime`, `DEFAULT_MAX_BYTES` (upload helpers), `buildExpo
 (account plug-in). See README for behavior and limits.
 
 Root types: `ActivityAction`, `ActivityEntry`, `Action`, `Actor`, `ActorKind`,
-`Can`, `Ctx`, `Drive`, `DriveDeps`, `ErrorCode`, `Node`, `OnConflict`,
+`Can`, `Ctx`, `Drive`, `DriveDeps`, `ErrorCode`, `Node`, `OnConflict`, `ResourceOwnership`,
 `UploadOptions`, `SearchQuery`, `BackfillOptions`, `BackfillResult`,
 `DriveAccount`, and `DriveAccountDeps`. They describe activity, callers, drive
 operations, uploads, migrations, and account operations.
@@ -105,8 +105,8 @@ view.unmount();
 ```
 
 `mount` returns a `MountedDrive` handle. `DriveBrowser` is the React component;
-`DriveUiOptions` is its configuration. The CSS path supplies its styles. The handle
-has `update` and `unmount` methods. The `getToken` callback runs before each request
+`DriveUiOptions` is its configuration. `DriveLocation` is the folder, trash, activity, or file location type. `DriveNavigationOptions` describes host history updates. The CSS path supplies its styles. The handle
+has `update`, `unmount`, `setLocation`, and `getLocation` methods. The `getToken` callback runs before each request
 and may return undefined. The UI does not change the page address or theme.
 The optional `onOpenItem` hook receives the full `Item` for a reference link, by pointer or Enter in list and grid views. Return true to skip the download; false or void keeps it. `OnOpenItem` and `Item` are exported types from `agentic-drive/ui`. Both `update` and React props can replace the hook.
 React 19 and React DOM 19 are optional peer dependencies.
@@ -122,3 +122,25 @@ The CLI uses `AGENTIC_DRIVE_TOKEN`. The MCP command serves tools over stdio;
 call `drive_ls` with a path. Storage adapters are provided by `agentic-identity`,
 not by a drive subpath. For example: `import { createFileStore, createFileBlobs } from "agentic-identity/file"`;
 pass `createFileStore({ path: "./data/db" })` and `createFileBlobs({ dir: "./data/blobs" })` to `createDrive`. The Worker uses D1 and R2 adapters by default.
+
+
+### Embedded navigation
+
+Set the location option to a folder with kind "folder" and path "/" (root),
+a folder id, or an absolute path. Use kind "trash" for trash. Activity and file
+locations use kind "activity" or "file" with itemId.
+
+The mounted handle also has setLocation and getLocation methods. getLocation
+returns a copy of the active location. A folder path can be passed as folder to
+registerDocument. update keeps the location unless its options supply one.
+React hosts can control location and apply onNavigate to their own state.
+
+onNavigate receives the next location and history options. Use pushState when
+replace is false, and replaceState when replace is true. File links download in place
+without changing location or notifying the host, including on error. Navigation
+cancels pending downloads. Explicit file locations return to the parent with
+replace true on success; an error leaves that explicit location selected.
+Root returns use "/". A direct location assignment does not notify the host,
+but a completed download does. Apply popstate with setLocation or React props.
+
+Trusted hosts use drive.claimResourceRef(ctx, path, ref, { resourceId, type, subject }, opts) for atomic app ownership. Check app access first. Repeated claims at the same path return the same reference. REF_CONFLICT means ownership or reference conflict. Direct trash releases the claim; restore reacquires it. Folder trash keeps child claims. This helper is not an unchecked HTTP, CLI, or MCP action.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-drive",
-  "version": "0.11.1",
+  "version": "0.13.0",
   "description": "Store, sort, and share files and folders.",
   "keywords": [
     "drive",
@@ -79,7 +79,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
     "agentic-design": ">=0.8.0 <1.0.0",
-    "agentic-identity": ">=0.9.0 <1.0.0",
+    "agentic-identity": ">=0.12.0 <1.0.0",
     "hono": "^4.13.14",
     "zod": "^4.6.6"
   },