agentic-drive 0.4.0 → 0.6.0

package/dist/{chunk-ATJDMCRV.js → chunk-WJZNXLTR.js}

@@ -94,7 +94,8 @@ function parseSubject(input) {
 var SHARE_ERROR = /^(invalid|give an|expiresAt|expiresInMs|resource exists|the last owner)/;
 function createDrive(deps) {
   const { store, blobs } = deps;
-  const now = deps.now ?? Date.now;
+  let last = 0;
+  const now = deps.now ?? (() => last = Math.max(Date.now(), last + 1));
   const newId = deps.newId ?? (() => globalThis.crypto.randomUUID());
   const maxDepth = deps.maxDepth ?? DEFAULT_MAX_DEPTH;
   const onOrphan = deps.onOrphan ?? ((key, error) => console.error(`orphan blob ${key}: ${error instanceof Error ? error.name : "delete failed"}`));
@@ -314,9 +315,9 @@ function createDrive(deps) {
   }
   async function parentAndName(ops, w, ctx, path, parents) {
     const { start, segs } = await startOf(ops, ctx, path);
-    const last = segs.pop();
-    if (!last) throw start.id === ROOT_ID ? new DriveError("IS_ROOT", "the root already exists") : new DriveError("INVALID_PATH", "name an item inside the folder");
-    return { parent: await folderAt(ops, w, ctx, start, segs, parents), name: last.name };
+    const last2 = segs.pop();
+    if (!last2) throw start.id === ROOT_ID ? new DriveError("IS_ROOT", "the root already exists") : new DriveError("INVALID_PATH", "name an item inside the folder");
+    return { parent: await folderAt(ops, w, ctx, start, segs, parents), name: last2.name };
   }
   async function relocate(ops, w, ctx, node, destLoc, opts) {
     if (node.id === ROOT_ID) throw new DriveError("IS_ROOT", "cannot change the root");
@@ -991,137 +992,6 @@ function createDrive(deps) {
   return Object.fromEntries(Object.entries(api).map(([name, call]) => [name, open.has(name) ? call : guarded(call)]));
 }
 
-// src/zip.ts
-var CRC_TABLE = Array.from({ length: 256 }, (_, n) => {
-  let c = n;
-  for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
-  return c >>> 0;
-});
-function crc32(data) {
-  let crc = 4294967295;
-  for (const byte of data) crc = CRC_TABLE[(crc ^ byte) & 255] ^ crc >>> 8;
-  return (crc ^ 4294967295) >>> 0;
-}
-function safeEntryName(name) {
-  if (name === "" || /[\\\u0000]/.test(name) || name.startsWith("/") || /^[a-zA-Z]:/.test(name)) return false;
-  return name.split("/").every((part) => part !== "" && part !== "." && part !== "..");
-}
-function writeZip(entries, at) {
-  for (const { name } of entries) if (!safeEntryName(name)) throw new Error(`zip: unsafe entry name ${JSON.stringify(name)}`);
-  const d = new Date(at);
-  const time = d.getUTCHours() << 11 | d.getUTCMinutes() << 5 | d.getUTCSeconds() >> 1;
-  const date = Math.max(d.getUTCFullYear(), 1980) - 1980 << 9 | d.getUTCMonth() + 1 << 5 | d.getUTCDate();
-  const parts = [];
-  const central = [];
-  let offset = 0;
-  const u16 = (v, o, n) => v.setUint16(o, n, true);
-  const u32 = (v, o, n) => v.setUint32(o, n, true);
-  for (const entry of entries) {
-    const name = new TextEncoder().encode(entry.name);
-    const crc = crc32(entry.data);
-    if (entry.data.byteLength >= 4294967295 || offset >= 4294967295 || entries.length >= 65535) throw new Error("zip: export is too large for a plain zip");
-    const local = new DataView(new ArrayBuffer(30));
-    u32(local, 0, 67324752);
-    u16(local, 4, 20);
-    u16(local, 6, 2048);
-    u16(local, 8, 0);
-    u16(local, 10, time);
-    u16(local, 12, date);
-    u32(local, 14, crc);
-    u32(local, 18, entry.data.byteLength);
-    u32(local, 22, entry.data.byteLength);
-    u16(local, 26, name.length);
-    u16(local, 28, 0);
-    const head = new DataView(new ArrayBuffer(46));
-    u32(head, 0, 33639248);
-    u16(head, 4, 20);
-    u16(head, 6, 20);
-    u16(head, 8, 2048);
-    u16(head, 10, 0);
-    u16(head, 12, time);
-    u16(head, 14, date);
-    u32(head, 16, crc);
-    u32(head, 20, entry.data.byteLength);
-    u32(head, 24, entry.data.byteLength);
-    u16(head, 28, name.length);
-    u32(head, 42, offset);
-    parts.push(new Uint8Array(local.buffer), name, entry.data);
-    central.push(new Uint8Array(head.buffer), name);
-    offset += 30 + name.length + entry.data.byteLength;
-  }
-  const size = central.reduce((n, p) => n + p.byteLength, 0);
-  const end = new DataView(new ArrayBuffer(22));
-  u32(end, 0, 101010256);
-  u16(end, 8, entries.length);
-  u16(end, 10, entries.length);
-  u32(end, 12, size);
-  u32(end, 16, offset);
-  const all = [...parts, ...central, new Uint8Array(end.buffer)];
-  const out = new Uint8Array(all.reduce((n, p) => n + p.byteLength, 0));
-  let at2 = 0;
-  for (const p of all) {
-    out.set(p, at2);
-    at2 += p.byteLength;
-  }
-  return out;
-}
-function readZip(bytes) {
-  const v = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  let end = bytes.byteLength - 22;
-  while (end >= 0 && v.getUint32(end, true) !== 101010256) end--;
-  if (end < 0) throw new Error("zip: no end signature");
-  const count = v.getUint16(end + 10, true);
-  const out = /* @__PURE__ */ new Map();
-  for (let i = 0, at = v.getUint32(end + 16, true); i < count; i++) {
-    if (v.getUint32(at, true) !== 33639248) throw new Error("zip: bad central signature");
-    if (v.getUint16(at + 10, true) !== 0) throw new Error("zip: compressed entries are not supported");
-    const crc = v.getUint32(at + 16, true);
-    const size = v.getUint32(at + 24, true);
-    const nameLen = v.getUint16(at + 28, true);
-    const local = v.getUint32(at + 42, true);
-    const name = new TextDecoder().decode(bytes.subarray(at + 46, at + 46 + nameLen));
-    if (v.getUint32(local, true) !== 67324752) throw new Error("zip: bad local signature");
-    const start = local + 30 + v.getUint16(local + 26, true) + v.getUint16(local + 28, true);
-    const data = bytes.slice(start, start + size);
-    if (crc32(data) !== crc) throw new Error(`zip: crc mismatch in ${name}`);
-    out.set(name, data);
-    at += 46 + nameLen + v.getUint16(at + 30, true) + v.getUint16(at + 32, true);
-  }
-  return out;
-}
-
-// src/export.ts
-async function buildExport(drive, ctx, now = Date.now) {
-  const entries = [];
-  const items = (await drive.exportData(ctx)).map(({ node, path, data, missing }) => {
-    const file = data ? `files/${node.id}` : null;
-    if (data && file) entries.push({ name: file, data });
-    return {
-      id: node.id,
-      owner: node.owner,
-      path,
-      parentId: node.parentId,
-      kind: node.kind,
-      name: node.name,
-      size: node.size,
-      mime: node.mime,
-      hash: node.hash,
-      ref: node.ref,
-      createdAt: node.createdAt,
-      updatedAt: node.updatedAt,
-      createdBy: node.createdBy,
-      updatedBy: node.updatedBy,
-      trashed: node.trashed,
-      trashedAt: node.trashedAt,
-      file,
-      ...missing ? { missing: true } : {}
-    };
-  });
-  const person = await drive.exportPerson(ctx);
-  const manifest = { format: "agentic-drive-export", version: 2, exportedAt: now(), owner: ctx.owner, subject: person.subject, partial: person.partial, items, authored: person.authored, agents: person.agents, shares: person.shares, audit: person.audit };
-  return writeZip([{ name: "manifest.json", data: new TextEncoder().encode(JSON.stringify(manifest, null, 2)) }, ...entries], now());
-}
-
 // src/adapters/fs.ts
 import { createHash } from "crypto";
 import { appendFileSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, truncateSync, writeFileSync, writeSync } from "fs";
@@ -1283,65 +1153,6 @@ function createFileBlobs(dir, options = {}) {
   };
 }
 
-// src/auth.ts
-import { createStoreAuth } from "agentic-identity";
-async function authenticate(request, store, now) {
-  if (!/^Bearer [A-Za-z0-9_-]{1,512}$/.test(request.headers.get("authorization") ?? "")) return null;
-  const principal = await createStoreAuth(store, now ? { now } : {}).authenticate(request);
-  return principal ? { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal } : null;
-}
-
-// src/local.ts
-import { createHash as createHash2 } from "crypto";
-import { join as join2 } from "path";
-import { isScope, issueCredential, revokeCredential } from "agentic-identity";
-function openLocal(dir) {
-  const store = createFileStore(join2(dir, "db"));
-  return { store, drive: createDrive({ store, blobs: createFileBlobs(join2(dir, "blobs")) }) };
-}
-var AuthError = class extends Error {
-  code = "UNAUTHENTICATED";
-};
-var NO_TOKEN = "no principal: pass --token <key> or set AGENTIC_DRIVE_TOKEN to an API key";
-var BAD_TOKEN = "the key is not valid: it is unknown, revoked, or expired, or its principal is revoked";
-async function resolveToken(store, token) {
-  if (!token) throw new AuthError(NO_TOKEN);
-  if (!/^[A-Za-z0-9_-]{1,512}$/.test(token)) throw new AuthError(BAD_TOKEN);
-  const ctx = await authenticate(new Request("http://local", { headers: { authorization: `Bearer ${token}` } }), store);
-  if (!ctx) throw new AuthError(BAD_TOKEN);
-  return ctx;
-}
-async function addPrincipal(store, id, opts) {
-  if (!/^[A-Za-z0-9_.@-]{1,128}$/.test(id)) throw new Error(`invalid principal id "${id}"`);
-  const scopes = opts.scopes?.length ? opts.scopes : [opts.parent ? "drive:write" : "drive:admin"];
-  const bad = scopes.find((s) => !isScope(s));
-  if (bad !== void 0) throw new Error(`invalid scope "${bad}"`);
-  if (await store.get("principals", id)) throw new Error(`principal "${id}" exists`);
-  if (opts.parent && !await store.get("principals", opts.parent)) throw new Error(`parent "${opts.parent}" does not exist`);
-  const parent = opts.parent ? await store.get("principals", opts.parent) : null;
-  if (parent && parent.kind !== "human") throw new Error(`parent "${opts.parent}" is not a person`);
-  const doc = opts.parent ? { id, kind: "agent_of_human", parentId: opts.parent, scopes } : { id, kind: "human", scopes };
-  await store.put("principals", id, doc);
-  return doc;
-}
-async function revokePrincipal(store, id) {
-  const doc = await store.get("principals", id);
-  if (!doc) throw new DriveError("NOT_FOUND", `principal "${id}" does not exist`);
-  await store.put("principals", id, { ...doc, revokedAt: Date.now() });
-}
-async function issueKey(store, principalId, label) {
-  if (!await store.get("principals", principalId)) throw new Error(`principal "${principalId}" does not exist`);
-  return issueCredential(store, { principalId, kind: "api_key", ...label ? { label } : {} });
-}
-async function revokeKey(store, token) {
-  if (!await store.get("credentials", createHash2("sha256").update(token).digest("hex"))) throw new DriveError("NOT_FOUND", "no such key");
-  await revokeCredential(store, token, Date.now());
-}
-function publicNode(node, path) {
-  const { nameKey: _nameKey, blobKey: _blobKey, purging: _purging, ...rest } = node;
-  return path === void 0 ? rest : { path, ...rest };
-}
-
 // src/upload.ts
 var DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
 var SIGNATURES = [
@@ -1402,6 +1213,197 @@ async function upload(drive, ctx, path, source, opts = {}) {
   return drive.putFile(ctx, path, data, { mime, parents: opts.parents, onConflict: opts.onConflict });
 }
 
+// src/zip.ts
+var CRC_TABLE = Array.from({ length: 256 }, (_, n) => {
+  let c = n;
+  for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+  return c >>> 0;
+});
+function crc32(data) {
+  let crc = 4294967295;
+  for (const byte of data) crc = CRC_TABLE[(crc ^ byte) & 255] ^ crc >>> 8;
+  return (crc ^ 4294967295) >>> 0;
+}
+function safeEntryName(name) {
+  if (name === "" || /[\\\u0000]/.test(name) || name.startsWith("/") || /^[a-zA-Z]:/.test(name)) return false;
+  return name.split("/").every((part) => part !== "" && part !== "." && part !== "..");
+}
+function writeZip(entries, at) {
+  for (const { name } of entries) if (!safeEntryName(name)) throw new Error(`zip: unsafe entry name ${JSON.stringify(name)}`);
+  const d = new Date(at);
+  const time = d.getUTCHours() << 11 | d.getUTCMinutes() << 5 | d.getUTCSeconds() >> 1;
+  const date = Math.max(d.getUTCFullYear(), 1980) - 1980 << 9 | d.getUTCMonth() + 1 << 5 | d.getUTCDate();
+  const parts = [];
+  const central = [];
+  let offset = 0;
+  const u16 = (v, o, n) => v.setUint16(o, n, true);
+  const u32 = (v, o, n) => v.setUint32(o, n, true);
+  for (const entry of entries) {
+    const name = new TextEncoder().encode(entry.name);
+    const crc = crc32(entry.data);
+    if (entry.data.byteLength >= 4294967295 || offset >= 4294967295 || entries.length >= 65535) throw new Error("zip: export is too large for a plain zip");
+    const local = new DataView(new ArrayBuffer(30));
+    u32(local, 0, 67324752);
+    u16(local, 4, 20);
+    u16(local, 6, 2048);
+    u16(local, 8, 0);
+    u16(local, 10, time);
+    u16(local, 12, date);
+    u32(local, 14, crc);
+    u32(local, 18, entry.data.byteLength);
+    u32(local, 22, entry.data.byteLength);
+    u16(local, 26, name.length);
+    u16(local, 28, 0);
+    const head = new DataView(new ArrayBuffer(46));
+    u32(head, 0, 33639248);
+    u16(head, 4, 20);
+    u16(head, 6, 20);
+    u16(head, 8, 2048);
+    u16(head, 10, 0);
+    u16(head, 12, time);
+    u16(head, 14, date);
+    u32(head, 16, crc);
+    u32(head, 20, entry.data.byteLength);
+    u32(head, 24, entry.data.byteLength);
+    u16(head, 28, name.length);
+    u32(head, 42, offset);
+    parts.push(new Uint8Array(local.buffer), name, entry.data);
+    central.push(new Uint8Array(head.buffer), name);
+    offset += 30 + name.length + entry.data.byteLength;
+  }
+  const size = central.reduce((n, p) => n + p.byteLength, 0);
+  const end = new DataView(new ArrayBuffer(22));
+  u32(end, 0, 101010256);
+  u16(end, 8, entries.length);
+  u16(end, 10, entries.length);
+  u32(end, 12, size);
+  u32(end, 16, offset);
+  const all = [...parts, ...central, new Uint8Array(end.buffer)];
+  const out = new Uint8Array(all.reduce((n, p) => n + p.byteLength, 0));
+  let at2 = 0;
+  for (const p of all) {
+    out.set(p, at2);
+    at2 += p.byteLength;
+  }
+  return out;
+}
+function readZip(bytes) {
+  const v = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  let end = bytes.byteLength - 22;
+  while (end >= 0 && v.getUint32(end, true) !== 101010256) end--;
+  if (end < 0) throw new Error("zip: no end signature");
+  const count = v.getUint16(end + 10, true);
+  const out = /* @__PURE__ */ new Map();
+  for (let i = 0, at = v.getUint32(end + 16, true); i < count; i++) {
+    if (v.getUint32(at, true) !== 33639248) throw new Error("zip: bad central signature");
+    if (v.getUint16(at + 10, true) !== 0) throw new Error("zip: compressed entries are not supported");
+    const crc = v.getUint32(at + 16, true);
+    const size = v.getUint32(at + 24, true);
+    const nameLen = v.getUint16(at + 28, true);
+    const local = v.getUint32(at + 42, true);
+    const name = new TextDecoder().decode(bytes.subarray(at + 46, at + 46 + nameLen));
+    if (v.getUint32(local, true) !== 67324752) throw new Error("zip: bad local signature");
+    const start = local + 30 + v.getUint16(local + 26, true) + v.getUint16(local + 28, true);
+    const data = bytes.slice(start, start + size);
+    if (crc32(data) !== crc) throw new Error(`zip: crc mismatch in ${name}`);
+    out.set(name, data);
+    at += 46 + nameLen + v.getUint16(at + 30, true) + v.getUint16(at + 32, true);
+  }
+  return out;
+}
+
+// src/export.ts
+async function buildExport(drive, ctx, now = Date.now) {
+  const entries = [];
+  const items = (await drive.exportData(ctx)).map(({ node, path, data, missing }) => {
+    const file = data ? `files/${node.id}` : null;
+    if (data && file) entries.push({ name: file, data });
+    return {
+      id: node.id,
+      owner: node.owner,
+      path,
+      parentId: node.parentId,
+      kind: node.kind,
+      name: node.name,
+      size: node.size,
+      mime: node.mime,
+      hash: node.hash,
+      ref: node.ref,
+      createdAt: node.createdAt,
+      updatedAt: node.updatedAt,
+      createdBy: node.createdBy,
+      updatedBy: node.updatedBy,
+      trashed: node.trashed,
+      trashedAt: node.trashedAt,
+      file,
+      ...missing ? { missing: true } : {}
+    };
+  });
+  const person = await drive.exportPerson(ctx);
+  const manifest = { format: "agentic-drive-export", version: 2, exportedAt: now(), owner: ctx.owner, subject: person.subject, partial: person.partial, items, authored: person.authored, agents: person.agents, shares: person.shares, audit: person.audit };
+  return writeZip([{ name: "manifest.json", data: new TextEncoder().encode(JSON.stringify(manifest, null, 2)) }, ...entries], now());
+}
+
+// src/auth.ts
+import { createStoreAuth } from "agentic-identity";
+async function authenticate(request, store, now) {
+  if (!/^Bearer [A-Za-z0-9_-]{1,512}$/.test(request.headers.get("authorization") ?? "")) return null;
+  const principal = await createStoreAuth(store, now ? { now } : {}).authenticate(request);
+  return principal ? { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal } : null;
+}
+
+// src/local.ts
+import { createHash as createHash2 } from "crypto";
+import { join as join2 } from "path";
+import { isMachineMade, isScope, issueCredential, revokeCredential } from "agentic-identity";
+function openLocal(dir) {
+  const store = createFileStore(join2(dir, "db"));
+  return { store, drive: createDrive({ store, blobs: createFileBlobs(join2(dir, "blobs")) }) };
+}
+var AuthError = class extends Error {
+  code = "UNAUTHENTICATED";
+};
+var NO_TOKEN = "no principal: pass --token <key> or set AGENTIC_DRIVE_TOKEN to an API key";
+var BAD_TOKEN = "the key is not valid: it is unknown, revoked, or expired, or its principal is revoked";
+async function resolveToken(store, token) {
+  if (!token) throw new AuthError(NO_TOKEN);
+  if (!/^[A-Za-z0-9_-]{1,512}$/.test(token)) throw new AuthError(BAD_TOKEN);
+  const ctx = await authenticate(new Request("http://local", { headers: { authorization: `Bearer ${token}` } }), store);
+  if (!ctx) throw new AuthError(BAD_TOKEN);
+  return ctx;
+}
+async function addPrincipal(store, id, opts) {
+  if (!/^[A-Za-z0-9_.@-]{1,128}$/.test(id)) throw new Error(`invalid principal id "${id}"`);
+  const scopes = opts.scopes?.length ? opts.scopes : [opts.parent ? "drive:write" : "drive:admin"];
+  const bad = scopes.find((s) => !isScope(s));
+  if (bad !== void 0) throw new Error(`invalid scope "${bad}"`);
+  if (await store.get("principals", id)) throw new Error(`principal "${id}" exists`);
+  if (opts.parent && !await store.get("principals", opts.parent)) throw new Error(`parent "${opts.parent}" does not exist`);
+  const parent = opts.parent ? await store.get("principals", opts.parent) : null;
+  if (parent && parent.kind !== "human") throw new Error(`parent "${opts.parent}" is not a person`);
+  const doc = opts.parent ? { id, kind: "agent_of_human", parentId: opts.parent, scopes } : { id, kind: "human", scopes };
+  await store.put("principals", id, doc);
+  return doc;
+}
+async function revokePrincipal(store, id) {
+  const doc = await store.get("principals", id);
+  if (!doc) throw new DriveError("NOT_FOUND", `principal "${id}" does not exist`);
+  await store.put("principals", id, { ...doc, revokedAt: Date.now() });
+}
+async function issueKey(store, principalId, label) {
+  if (!await store.get("principals", principalId)) throw new Error(`principal "${principalId}" does not exist`);
+  return issueCredential(store, { principalId, kind: "api_key", ...label ? { label } : {} });
+}
+async function revokeKey(store, token) {
+  if (!await store.get("credentials", createHash2("sha256").update(token).digest("hex"))) throw new DriveError("NOT_FOUND", "no such key");
+  await revokeCredential(store, token, Date.now());
+}
+function publicNode(node, path) {
+  const { nameKey: _nameKey, blobKey: _blobKey, purging: _purging, ...rest } = node;
+  const shown = { ...rest, machineMade: isMachineMade(node.createdBy.kind) };
+  return path === void 0 ? shown : { path, ...shown };
+}
+
 export {
   ROOT_ID,
   ACTOR_KINDS,
@@ -1413,11 +1415,14 @@ export {
   subjectKindOf,
   parseSubject,
   createDrive,
+  createFileStore,
+  createFileBlobs,
+  DEFAULT_MAX_BYTES,
+  sniffMime,
+  upload,
   writeZip,
   readZip,
   buildExport,
-  createFileStore,
-  createFileBlobs,
   authenticate,
   openLocal,
   AuthError,
@@ -1427,8 +1432,5 @@ export {
   revokePrincipal,
   issueKey,
   revokeKey,
-  publicNode,
-  DEFAULT_MAX_BYTES,
-  sniffMime,
-  upload
+  publicNode
 };

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-DRACF66Y.js";
+} from "./chunk-ES3NZ7SX.js";
 import {
   AuthError,
   DriveError,
@@ -15,7 +15,7 @@ import {
   revokeKey,
   revokePrincipal,
   upload
-} from "./chunk-ATJDMCRV.js";
+} from "./chunk-WJZNXLTR.js";
 
 // src/cli.ts
 import { createReadStream, realpathSync, writeFileSync } from "fs";

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { E as ErrorCode, N as Node, S as SearchQuery } from './drive-Cn3mpuDW.js';
+import { E as ErrorCode, N as Node, S as SearchQuery } from './drive-BtRyexUP.js';
 import 'agentic-identity';
 
 type Role = "viewer" | "commenter" | "editor" | "owner";
@@ -9,7 +9,10 @@ type Subject = {
     id: string;
 };
 /** An item as the API prints it: no storage keys. */
-type Item = Omit<Node, "nameKey" | "blobKey" | "purging">;
+/** `machineMade` is true when the creator is not a human principal. */
+type Item = Omit<Node, "nameKey" | "blobKey" | "purging"> & {
+    machineMade: boolean;
+};
 /** A search hit, or a home item: an item with its path. */
 type PathItem = Item & {
     path: string;