agentic-drive 0.5.0 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.6.1
+
+### Changed
+
+- **Bearer tokens are checked by the agentic-identity HTTP helper.** The Worker and the local key check now call `requirePrincipal` from `agentic-identity/http` (agentic-identity 0.6). The package no longer has its own copy of the bearer-token check in `src/auth.ts` and `src/local.ts`. A request without an `authorization` header still gets no caller, so a session cookie does not sign in. A bad key still gives 401, and `resolveToken` still throws `AuthError` with the code `UNAUTHENTICATED`.
+- **The dependency is agentic-identity 0.6.** The package now needs `agentic-identity` `^0.6.0`.
+
+## 0.6.0
+
+### Added
+
+- **`createApp` takes an injected store, blobs, and auth.** `createApp({ store, blobs, auth })` from `agentic-drive/worker` lets a host serve the drive routes with its own `Store`, `Blobs`, and sign-in callback. Each part may be a function of the Worker env. With no options, the Worker works as before. A Worker with no `DB` or `FILES` binding and no injected store or blobs now answers 503 `NOT_CONFIGURED`. The package also exports the `AppOptions` type.
+- **Mountable UI at `agentic-drive/ui`.** `mount(element, { baseUrl, getToken })` renders the drive UI in any page and returns `{ update, unmount }`. `getToken` runs before each request. The styles are in `agentic-drive/ui.css`. The embed keeps its folder in memory, so it does not change the page address. `react` and `react-dom` 19 are optional peer dependencies, and `agentic-design` is now a dependency.
+
 ## 0.5.0
 
 Read the breaking changes before you upgrade or deploy.

package/README.md

@@ -7,7 +7,7 @@
 
 Store, sort, and share files and folders.
 
-> Status: 0.5.0, early. The library, CLI, MCP server, and HTTP API work, with sharing in the SDK and the HTTP API.
+> Status: 0.6.1, early. The library, CLI, MCP server, and HTTP API work, with sharing in the SDK and the HTTP API.
 > A small web UI works. See [UI](#ui).
 
 ## Live demo
@@ -47,18 +47,7 @@ await drive.trash(me, "/reports/2026");
 
 ## CLI and MCP
 
-```sh
-npx agentic-drive mkdir -p /reports
-npx agentic-drive upload ./q1.pdf /reports/
-npx agentic-drive search --name q1
-npx agentic-drive export ./everything.zip
-npx agentic-drive mcp
-```
-
-Every command prints JSON. A failure prints `{"error":{"code","message"}}` on stderr and exits 1.
-Exit code 2 means bad usage. Exit code 3 means no principal, or a key that is not valid.
-
-Every command except `help`, `version`, `principal`, and `key` needs a principal. Pass an API key with
+Every command except `help`, `--version`, `principal`, and `key` needs a principal. Pass an API key with
 `--token <key>` or `AGENTIC_DRIVE_TOKEN`. Prefer the variable: a flag shows in `ps`.
 `agentic-identity` resolves the key. The drive belongs to the person at the top of the
 principal's chain. An agent key marks each item it makes as made by a machine. A revoked,
@@ -73,10 +62,21 @@ npx agentic-drive key revoke <key>
 npx agentic-drive principal revoke helper             # stops its keys, and its agents
 ```
 
-`principal` and `key` need no key: anyone who can read the `--dir` folder can run them.
+`principal` and `key` need no key: anyone who can write to the `--dir` folder can run them.
 Set `--dir` (or `AGENTIC_DRIVE_DIR`) to choose the data folder.
 The local drive checks the owner only. It does not apply the scopes of an agent key.
 
+```sh
+npx agentic-drive mkdir -p /reports
+npx agentic-drive upload ./q1.pdf /reports/
+npx agentic-drive search --name q1
+npx agentic-drive export ./everything.zip
+npx agentic-drive mcp
+```
+
+Every command prints JSON, except `help`, `--version`, `mcp`, and `download` to `-`. A failure prints `{"error":{"code","message"}}` on stderr and exits 1.
+Exit code 2 means bad usage. Exit code 3 means no principal, or a key that is not valid.
+
 ## HTTP API
 
 A Cloudflare Worker (Hono) serves `/api/v1/drive` and mirrors the CLI. It uses D1 and R2
@@ -133,6 +133,35 @@ try {
 - A browser page needs the Worker on its own origin for now: the Worker sends no CORS headers.
 - Share with a subject: `share("/pub", { kind: "human", id: "u2" }, "viewer")`.
 
+### Other exports
+
+The root export, `agentic-drive`, also exports these names. The package typings give the type of each one.
+
+- `VERSION` is the package version. `ROOT_ID` is the id of a drive's root folder, `"root"`. `ACTOR_KINDS` lists
+  the five principal kinds that `agentic-identity` names.
+- `DEFAULT_MAX_BYTES` is the upload cap: 25 MiB (26,214,400 bytes). `sniffMime(head)` returns the type that
+  the first bytes name: PNG, JPEG, GIF, PDF, ZIP, gzip, or WebP. It returns `null` for any other bytes.
+- `parseName(raw)` returns `{ name, key }`. It normalizes the name to NFC, and `key` is the lowercase name.
+  It throws a `DriveError` with the code `INVALID_NAME` for a blank name, `.`, `..`, a lone surrogate, a `/`,
+  a control character (U+0000 to U+001F, or U+007F), or a name over 255 bytes in UTF-8. `parseSubject(input)` returns `{ kind, id }` for a valid subject, and throws
+  `INVALID_SHARE` for any other input. `subjectKindOf(kind)` returns `human` or `agent`, and throws
+  `INVALID_SHARE` for any other kind.
+- A `DriveError` has a `code` from `ErrorCode`, such as `NOT_FOUND` or `NAME_TAKEN`.
+- `readZip(bytes)` reads a zip that `writeZip` made, with stored (uncompressed) entries only. It returns a `Map`
+  from each entry name to its bytes. It throws for a compressed entry. `writeZip(entries, at)` writes a zip with
+  one `{ name, data }` entry for each file, and `at` sets the time in milliseconds. It throws for an unsafe
+  name, such as one with `..` or a leading `/`.
+- The local drive has the functions behind the CLI. `openLocal(dir)` returns `{ drive, store }` for a folder.
+  `addPrincipal(store, id, { parent?, scopes? })` makes a principal. `issueKey(store, principalId, label?)`
+  returns the key. Keep it: the store keeps no plain copy. `resolveToken(store, token)` returns the caller, or throws `AuthError`
+  with the code `UNAUTHENTICATED`. `revokeKey(store, token)` stops one key. `revokePrincipal(store, id)` stops a
+  principal, its keys, and every agent below it.
+  `publicNode(node, path?)` returns an item without its storage keys and its `purging` flag, and adds `machineMade`. When `path` is
+  given, it also adds `path`.
+
+  The local functions trust their caller. Local data is the trust boundary: anyone who can write the folder
+  can act as any principal in it.
+
 ## UI
 
 The Worker serves a small web UI. It uses the [agentic-design](https://www.npmjs.com/package/agentic-design) package and the typed client of this package (`agentic-drive/client`). It has a folder tree, breadcrumbs, a file list and grid, upload by button or by drag and drop, new folder, rename, move, trash and restore, and a share dialog with roles and a link. An item that an agent made shows a "Created by agent" label while a person is its last editor. "Edited by" names the last editor, a person or an agent. It works with the keyboard. An automated axe check for WCAG 2.2 AA passes on each view in the light and dark themes.
@@ -155,6 +184,26 @@ Run `npm run build:ui` before `npm run test:e2e` or `wrangler deploy`, because t
 
 Set `DRIVE_PUBLIC_URL` to the origin that serves the UI. A download link on another origin is refused.
 
+### Mount the UI in your app
+
+`agentic-drive/ui` renders the same UI inside your own page. It needs no framework in your app. You give it an element, the address of a drive server, and a function that returns the bearer token. `mount` returns a handle.
+
+```ts
+import "agentic-design/styles.css";   // tokens, fonts, and base styles for body, headings, and links
+import "agentic-drive/ui.css";        // the drive styles
+import { mount } from "agentic-drive/ui";
+
+const drive = mount(document.getElementById("drive")!, {
+  baseUrl: "https://drive.example.com",
+  getToken: () => session.token,      // runs before every request, so it can refresh
+});
+
+drive.update({ baseUrl, getToken });  // use another server or callback
+drive.unmount();                      // remove the UI
+```
+
+`getToken` returns 1 to 512 letters, digits, `-` or `_`, or `undefined` to send no `authorization` header. A bad `baseUrl` or a `getToken` that is not a function makes `mount` throw a `TypeError`. The server still checks every request against the token. The embed shows files and trash with upload, rename, move, share, and the "Created by agent" label. It has no sign-in form, because your app owns sign-in. It does not change the page address, and it has no theme switch. `agentic-design/styles.css` sets base styles for the whole page, and it follows the dark mode of the system unless your page sets `data-theme`. Add `agentic-design` to your own dependencies, because your page imports its files. The Worker sends no CORS headers, so the server must be on the origin of your page. Set `baseUrl` to the same address as `DRIVE_PUBLIC_URL`, or the UI refuses its download links. `unmount` and `update` abort the requests that run and stop an upload that has more files to send. The UI keeps the list or grid choice in `localStorage` under `agentic-drive-view`, and it has its own heading for each view. Dialogs, menus, and messages render in `document.body`, outside your element. A click with Ctrl, Cmd, Shift, or the middle button on a folder link does not open the folder. The class names start with `drive-`. `DriveBrowser` is the same UI as a React component. It closes its requests when it unmounts. Wrap it in `TooltipProvider` and `ToastProvider` from `agentic-design/react`. `react` and `react-dom` (version 19 or later) are optional peer dependencies. Install them in your project when you use `agentic-drive/ui`. The web UI that the Worker serves uses the same views.
+
 ### Serve the UI from the package
 
 The npm package ships the built UI in `ui-dist`. The package does not ship a `wrangler.jsonc`, so a project that deploys its own Worker adds the assets block to its config. Its Worker re-exports the package Worker. In a workspace, the package can sit in the root `node_modules`. Then point `assets.directory` at that folder, such as `../../node_modules/agentic-drive/ui-dist`:
@@ -190,6 +239,30 @@ The [seed script](https://github.com/pooriaarab/agentic-drive/blob/main/e2e/serv
 
 The UI does not make snapshot links yet. The address of a share link shows once, when you create it.
 
+### Inject a store, blobs, and sign-in
+
+A host that has its own Worker can serve the drive routes from it. `createApp` from `agentic-drive/worker` takes the parts to use. Each part is optional. A part may be a function of the Worker env, which runs on each request.
+
+```ts
+import { createApp } from "agentic-drive/worker";
+
+const app = createApp({
+  store: (env) => myStore(env),   // a Store of agentic-identity
+  blobs: (env) => myBlobs(env),   // a Blobs of agentic-identity
+  // Return a Ctx for the caller, or null for a 401.
+  auth: async (request, store, env) => {
+    const principal = await mySignIn(request, env);
+    return principal && { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal };
+  },
+});
+export default { fetch: app.fetch };
+```
+
+- With `store`, the Worker reads no `DB` binding. It does not create the table either, so the host owns the schema.
+- With `blobs`, the Worker reads no `FILES` binding and needs no `DRIVE_PUBLIC_URL`. The blobs must sign download URLs that point to `/api/v1/drive/blob` on this Worker. That route checks the signature with `DRIVE_URL_SECRET` before it reads the store or the blobs, so set that secret.
+- With `auth`, the Worker does not read bearer tokens from the store. The callback decides who the caller is. Return a whole `Ctx`: a `principal`, and an `owner` and `actor` that match it. Any other value gets 401. Make sure `principal.chain` and `principal.scopes` are real, because the drive checks them. A callback that reads a session cookie must check the request origin itself. Every write route is open to a cross-site form until it does.
+- With no options, `createApp()` works as before: D1, R2, and bearer tokens from the store. `export { default } from "agentic-drive/worker"` is the same.
+
 ## Features
 
 - Folders, files, and typed references to documents in other apps (`docs:<id>`).
@@ -217,7 +290,7 @@ The UI does not make snapshot links yet. The address of a share link shows once,
 - `registerDocument` makes one item per document in a drive. Two calls at the same moment can make two.
 
 - Drive reads the `store_docs` table in D1 and `store.jsonl` in the CLI folder. It does not read older layouts. There is no import and no claim backfill.
-- Uploads buffer the stream in memory up to the cap. The default cap is 25 MiB.
+- Uploads buffer the stream in memory up to the cap. The default cap is 25 MiB (`DEFAULT_MAX_BYTES`).
 - Local file blobs return a `file:` URL that nothing serves or checks.
 - Drive writes each new blob only when its key is free (`ifNoneMatch`). A write that finds the key taken fails with `BLOB_EXISTS`.
 - Only `upload()` enforces the size cap. A caller of `putFile()` must check size first.

package/dist/{chunk-B7E2Q3RB.js → chunk-5Z3SFBUK.js}

@@ -1,7 +1,7 @@
 import {
   ROOT_ID,
   rootResource
-} from "./chunk-T6C5Y2WA.js";
+} from "./chunk-EAKQK7ST.js";
 
 // src/migrate.ts
 var PAGE = 10;

package/dist/{chunk-T6C5Y2WA.js → chunk-EAKQK7ST.js}

@@ -94,7 +94,8 @@ function parseSubject(input) {
 var SHARE_ERROR = /^(invalid|give an|expiresAt|expiresInMs|resource exists|the last owner)/;
 function createDrive(deps) {
   const { store, blobs } = deps;
-  const now = deps.now ?? Date.now;
+  let last = 0;
+  const now = deps.now ?? (() => last = Math.max(Date.now(), last + 1));
   const newId = deps.newId ?? (() => globalThis.crypto.randomUUID());
   const maxDepth = deps.maxDepth ?? DEFAULT_MAX_DEPTH;
   const onOrphan = deps.onOrphan ?? ((key, error) => console.error(`orphan blob ${key}: ${error instanceof Error ? error.name : "delete failed"}`));
@@ -314,9 +315,9 @@ function createDrive(deps) {
   }
   async function parentAndName(ops, w, ctx, path, parents) {
     const { start, segs } = await startOf(ops, ctx, path);
-    const last = segs.pop();
-    if (!last) throw start.id === ROOT_ID ? new DriveError("IS_ROOT", "the root already exists") : new DriveError("INVALID_PATH", "name an item inside the folder");
-    return { parent: await folderAt(ops, w, ctx, start, segs, parents), name: last.name };
+    const last2 = segs.pop();
+    if (!last2) throw start.id === ROOT_ID ? new DriveError("IS_ROOT", "the root already exists") : new DriveError("INVALID_PATH", "name an item inside the folder");
+    return { parent: await folderAt(ops, w, ctx, start, segs, parents), name: last2.name };
   }
   async function relocate(ops, w, ctx, node, destLoc, opts) {
     if (node.id === ROOT_ID) throw new DriveError("IS_ROOT", "cannot change the root");
@@ -991,137 +992,6 @@ function createDrive(deps) {
   return Object.fromEntries(Object.entries(api).map(([name, call]) => [name, open.has(name) ? call : guarded(call)]));
 }
 
-// src/zip.ts
-var CRC_TABLE = Array.from({ length: 256 }, (_, n) => {
-  let c = n;
-  for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
-  return c >>> 0;
-});
-function crc32(data) {
-  let crc = 4294967295;
-  for (const byte of data) crc = CRC_TABLE[(crc ^ byte) & 255] ^ crc >>> 8;
-  return (crc ^ 4294967295) >>> 0;
-}
-function safeEntryName(name) {
-  if (name === "" || /[\\\u0000]/.test(name) || name.startsWith("/") || /^[a-zA-Z]:/.test(name)) return false;
-  return name.split("/").every((part) => part !== "" && part !== "." && part !== "..");
-}
-function writeZip(entries, at) {
-  for (const { name } of entries) if (!safeEntryName(name)) throw new Error(`zip: unsafe entry name ${JSON.stringify(name)}`);
-  const d = new Date(at);
-  const time = d.getUTCHours() << 11 | d.getUTCMinutes() << 5 | d.getUTCSeconds() >> 1;
-  const date = Math.max(d.getUTCFullYear(), 1980) - 1980 << 9 | d.getUTCMonth() + 1 << 5 | d.getUTCDate();
-  const parts = [];
-  const central = [];
-  let offset = 0;
-  const u16 = (v, o, n) => v.setUint16(o, n, true);
-  const u32 = (v, o, n) => v.setUint32(o, n, true);
-  for (const entry of entries) {
-    const name = new TextEncoder().encode(entry.name);
-    const crc = crc32(entry.data);
-    if (entry.data.byteLength >= 4294967295 || offset >= 4294967295 || entries.length >= 65535) throw new Error("zip: export is too large for a plain zip");
-    const local = new DataView(new ArrayBuffer(30));
-    u32(local, 0, 67324752);
-    u16(local, 4, 20);
-    u16(local, 6, 2048);
-    u16(local, 8, 0);
-    u16(local, 10, time);
-    u16(local, 12, date);
-    u32(local, 14, crc);
-    u32(local, 18, entry.data.byteLength);
-    u32(local, 22, entry.data.byteLength);
-    u16(local, 26, name.length);
-    u16(local, 28, 0);
-    const head = new DataView(new ArrayBuffer(46));
-    u32(head, 0, 33639248);
-    u16(head, 4, 20);
-    u16(head, 6, 20);
-    u16(head, 8, 2048);
-    u16(head, 10, 0);
-    u16(head, 12, time);
-    u16(head, 14, date);
-    u32(head, 16, crc);
-    u32(head, 20, entry.data.byteLength);
-    u32(head, 24, entry.data.byteLength);
-    u16(head, 28, name.length);
-    u32(head, 42, offset);
-    parts.push(new Uint8Array(local.buffer), name, entry.data);
-    central.push(new Uint8Array(head.buffer), name);
-    offset += 30 + name.length + entry.data.byteLength;
-  }
-  const size = central.reduce((n, p) => n + p.byteLength, 0);
-  const end = new DataView(new ArrayBuffer(22));
-  u32(end, 0, 101010256);
-  u16(end, 8, entries.length);
-  u16(end, 10, entries.length);
-  u32(end, 12, size);
-  u32(end, 16, offset);
-  const all = [...parts, ...central, new Uint8Array(end.buffer)];
-  const out = new Uint8Array(all.reduce((n, p) => n + p.byteLength, 0));
-  let at2 = 0;
-  for (const p of all) {
-    out.set(p, at2);
-    at2 += p.byteLength;
-  }
-  return out;
-}
-function readZip(bytes) {
-  const v = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  let end = bytes.byteLength - 22;
-  while (end >= 0 && v.getUint32(end, true) !== 101010256) end--;
-  if (end < 0) throw new Error("zip: no end signature");
-  const count = v.getUint16(end + 10, true);
-  const out = /* @__PURE__ */ new Map();
-  for (let i = 0, at = v.getUint32(end + 16, true); i < count; i++) {
-    if (v.getUint32(at, true) !== 33639248) throw new Error("zip: bad central signature");
-    if (v.getUint16(at + 10, true) !== 0) throw new Error("zip: compressed entries are not supported");
-    const crc = v.getUint32(at + 16, true);
-    const size = v.getUint32(at + 24, true);
-    const nameLen = v.getUint16(at + 28, true);
-    const local = v.getUint32(at + 42, true);
-    const name = new TextDecoder().decode(bytes.subarray(at + 46, at + 46 + nameLen));
-    if (v.getUint32(local, true) !== 67324752) throw new Error("zip: bad local signature");
-    const start = local + 30 + v.getUint16(local + 26, true) + v.getUint16(local + 28, true);
-    const data = bytes.slice(start, start + size);
-    if (crc32(data) !== crc) throw new Error(`zip: crc mismatch in ${name}`);
-    out.set(name, data);
-    at += 46 + nameLen + v.getUint16(at + 30, true) + v.getUint16(at + 32, true);
-  }
-  return out;
-}
-
-// src/export.ts
-async function buildExport(drive, ctx, now = Date.now) {
-  const entries = [];
-  const items = (await drive.exportData(ctx)).map(({ node, path, data, missing }) => {
-    const file = data ? `files/${node.id}` : null;
-    if (data && file) entries.push({ name: file, data });
-    return {
-      id: node.id,
-      owner: node.owner,
-      path,
-      parentId: node.parentId,
-      kind: node.kind,
-      name: node.name,
-      size: node.size,
-      mime: node.mime,
-      hash: node.hash,
-      ref: node.ref,
-      createdAt: node.createdAt,
-      updatedAt: node.updatedAt,
-      createdBy: node.createdBy,
-      updatedBy: node.updatedBy,
-      trashed: node.trashed,
-      trashedAt: node.trashedAt,
-      file,
-      ...missing ? { missing: true } : {}
-    };
-  });
-  const person = await drive.exportPerson(ctx);
-  const manifest = { format: "agentic-drive-export", version: 2, exportedAt: now(), owner: ctx.owner, subject: person.subject, partial: person.partial, items, authored: person.authored, agents: person.agents, shares: person.shares, audit: person.audit };
-  return writeZip([{ name: "manifest.json", data: new TextEncoder().encode(JSON.stringify(manifest, null, 2)) }, ...entries], now());
-}
-
 // src/adapters/fs.ts
 import { createHash } from "crypto";
 import { appendFileSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, truncateSync, writeFileSync, writeSync } from "fs";
@@ -1283,66 +1153,6 @@ function createFileBlobs(dir, options = {}) {
   };
 }
 
-// src/auth.ts
-import { createStoreAuth } from "agentic-identity";
-async function authenticate(request, store, now) {
-  if (!/^Bearer [A-Za-z0-9_-]{1,512}$/.test(request.headers.get("authorization") ?? "")) return null;
-  const principal = await createStoreAuth(store, now ? { now } : {}).authenticate(request);
-  return principal ? { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal } : null;
-}
-
-// src/local.ts
-import { createHash as createHash2 } from "crypto";
-import { join as join2 } from "path";
-import { isMachineMade, isScope, issueCredential, revokeCredential } from "agentic-identity";
-function openLocal(dir) {
-  const store = createFileStore(join2(dir, "db"));
-  return { store, drive: createDrive({ store, blobs: createFileBlobs(join2(dir, "blobs")) }) };
-}
-var AuthError = class extends Error {
-  code = "UNAUTHENTICATED";
-};
-var NO_TOKEN = "no principal: pass --token <key> or set AGENTIC_DRIVE_TOKEN to an API key";
-var BAD_TOKEN = "the key is not valid: it is unknown, revoked, or expired, or its principal is revoked";
-async function resolveToken(store, token) {
-  if (!token) throw new AuthError(NO_TOKEN);
-  if (!/^[A-Za-z0-9_-]{1,512}$/.test(token)) throw new AuthError(BAD_TOKEN);
-  const ctx = await authenticate(new Request("http://local", { headers: { authorization: `Bearer ${token}` } }), store);
-  if (!ctx) throw new AuthError(BAD_TOKEN);
-  return ctx;
-}
-async function addPrincipal(store, id, opts) {
-  if (!/^[A-Za-z0-9_.@-]{1,128}$/.test(id)) throw new Error(`invalid principal id "${id}"`);
-  const scopes = opts.scopes?.length ? opts.scopes : [opts.parent ? "drive:write" : "drive:admin"];
-  const bad = scopes.find((s) => !isScope(s));
-  if (bad !== void 0) throw new Error(`invalid scope "${bad}"`);
-  if (await store.get("principals", id)) throw new Error(`principal "${id}" exists`);
-  if (opts.parent && !await store.get("principals", opts.parent)) throw new Error(`parent "${opts.parent}" does not exist`);
-  const parent = opts.parent ? await store.get("principals", opts.parent) : null;
-  if (parent && parent.kind !== "human") throw new Error(`parent "${opts.parent}" is not a person`);
-  const doc = opts.parent ? { id, kind: "agent_of_human", parentId: opts.parent, scopes } : { id, kind: "human", scopes };
-  await store.put("principals", id, doc);
-  return doc;
-}
-async function revokePrincipal(store, id) {
-  const doc = await store.get("principals", id);
-  if (!doc) throw new DriveError("NOT_FOUND", `principal "${id}" does not exist`);
-  await store.put("principals", id, { ...doc, revokedAt: Date.now() });
-}
-async function issueKey(store, principalId, label) {
-  if (!await store.get("principals", principalId)) throw new Error(`principal "${principalId}" does not exist`);
-  return issueCredential(store, { principalId, kind: "api_key", ...label ? { label } : {} });
-}
-async function revokeKey(store, token) {
-  if (!await store.get("credentials", createHash2("sha256").update(token).digest("hex"))) throw new DriveError("NOT_FOUND", "no such key");
-  await revokeCredential(store, token, Date.now());
-}
-function publicNode(node, path) {
-  const { nameKey: _nameKey, blobKey: _blobKey, purging: _purging, ...rest } = node;
-  const shown = { ...rest, machineMade: isMachineMade(node.createdBy.kind) };
-  return path === void 0 ? shown : { path, ...shown };
-}
-
 // src/upload.ts
 var DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
 var SIGNATURES = [
@@ -1403,6 +1213,204 @@ async function upload(drive, ctx, path, source, opts = {}) {
   return drive.putFile(ctx, path, data, { mime, parents: opts.parents, onConflict: opts.onConflict });
 }
 
+// src/zip.ts
+var CRC_TABLE = Array.from({ length: 256 }, (_, n) => {
+  let c = n;
+  for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+  return c >>> 0;
+});
+function crc32(data) {
+  let crc = 4294967295;
+  for (const byte of data) crc = CRC_TABLE[(crc ^ byte) & 255] ^ crc >>> 8;
+  return (crc ^ 4294967295) >>> 0;
+}
+function safeEntryName(name) {
+  if (name === "" || /[\\\u0000]/.test(name) || name.startsWith("/") || /^[a-zA-Z]:/.test(name)) return false;
+  return name.split("/").every((part) => part !== "" && part !== "." && part !== "..");
+}
+function writeZip(entries, at) {
+  for (const { name } of entries) if (!safeEntryName(name)) throw new Error(`zip: unsafe entry name ${JSON.stringify(name)}`);
+  const d = new Date(at);
+  const time = d.getUTCHours() << 11 | d.getUTCMinutes() << 5 | d.getUTCSeconds() >> 1;
+  const date = Math.max(d.getUTCFullYear(), 1980) - 1980 << 9 | d.getUTCMonth() + 1 << 5 | d.getUTCDate();
+  const parts = [];
+  const central = [];
+  let offset = 0;
+  const u16 = (v, o, n) => v.setUint16(o, n, true);
+  const u32 = (v, o, n) => v.setUint32(o, n, true);
+  for (const entry of entries) {
+    const name = new TextEncoder().encode(entry.name);
+    const crc = crc32(entry.data);
+    if (entry.data.byteLength >= 4294967295 || offset >= 4294967295 || entries.length >= 65535) throw new Error("zip: export is too large for a plain zip");
+    const local = new DataView(new ArrayBuffer(30));
+    u32(local, 0, 67324752);
+    u16(local, 4, 20);
+    u16(local, 6, 2048);
+    u16(local, 8, 0);
+    u16(local, 10, time);
+    u16(local, 12, date);
+    u32(local, 14, crc);
+    u32(local, 18, entry.data.byteLength);
+    u32(local, 22, entry.data.byteLength);
+    u16(local, 26, name.length);
+    u16(local, 28, 0);
+    const head = new DataView(new ArrayBuffer(46));
+    u32(head, 0, 33639248);
+    u16(head, 4, 20);
+    u16(head, 6, 20);
+    u16(head, 8, 2048);
+    u16(head, 10, 0);
+    u16(head, 12, time);
+    u16(head, 14, date);
+    u32(head, 16, crc);
+    u32(head, 20, entry.data.byteLength);
+    u32(head, 24, entry.data.byteLength);
+    u16(head, 28, name.length);
+    u32(head, 42, offset);
+    parts.push(new Uint8Array(local.buffer), name, entry.data);
+    central.push(new Uint8Array(head.buffer), name);
+    offset += 30 + name.length + entry.data.byteLength;
+  }
+  const size = central.reduce((n, p) => n + p.byteLength, 0);
+  const end = new DataView(new ArrayBuffer(22));
+  u32(end, 0, 101010256);
+  u16(end, 8, entries.length);
+  u16(end, 10, entries.length);
+  u32(end, 12, size);
+  u32(end, 16, offset);
+  const all = [...parts, ...central, new Uint8Array(end.buffer)];
+  const out = new Uint8Array(all.reduce((n, p) => n + p.byteLength, 0));
+  let at2 = 0;
+  for (const p of all) {
+    out.set(p, at2);
+    at2 += p.byteLength;
+  }
+  return out;
+}
+function readZip(bytes) {
+  const v = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  let end = bytes.byteLength - 22;
+  while (end >= 0 && v.getUint32(end, true) !== 101010256) end--;
+  if (end < 0) throw new Error("zip: no end signature");
+  const count = v.getUint16(end + 10, true);
+  const out = /* @__PURE__ */ new Map();
+  for (let i = 0, at = v.getUint32(end + 16, true); i < count; i++) {
+    if (v.getUint32(at, true) !== 33639248) throw new Error("zip: bad central signature");
+    if (v.getUint16(at + 10, true) !== 0) throw new Error("zip: compressed entries are not supported");
+    const crc = v.getUint32(at + 16, true);
+    const size = v.getUint32(at + 24, true);
+    const nameLen = v.getUint16(at + 28, true);
+    const local = v.getUint32(at + 42, true);
+    const name = new TextDecoder().decode(bytes.subarray(at + 46, at + 46 + nameLen));
+    if (v.getUint32(local, true) !== 67324752) throw new Error("zip: bad local signature");
+    const start = local + 30 + v.getUint16(local + 26, true) + v.getUint16(local + 28, true);
+    const data = bytes.slice(start, start + size);
+    if (crc32(data) !== crc) throw new Error(`zip: crc mismatch in ${name}`);
+    out.set(name, data);
+    at += 46 + nameLen + v.getUint16(at + 30, true) + v.getUint16(at + 32, true);
+  }
+  return out;
+}
+
+// src/export.ts
+async function buildExport(drive, ctx, now = Date.now) {
+  const entries = [];
+  const items = (await drive.exportData(ctx)).map(({ node, path, data, missing }) => {
+    const file = data ? `files/${node.id}` : null;
+    if (data && file) entries.push({ name: file, data });
+    return {
+      id: node.id,
+      owner: node.owner,
+      path,
+      parentId: node.parentId,
+      kind: node.kind,
+      name: node.name,
+      size: node.size,
+      mime: node.mime,
+      hash: node.hash,
+      ref: node.ref,
+      createdAt: node.createdAt,
+      updatedAt: node.updatedAt,
+      createdBy: node.createdBy,
+      updatedBy: node.updatedBy,
+      trashed: node.trashed,
+      trashedAt: node.trashedAt,
+      file,
+      ...missing ? { missing: true } : {}
+    };
+  });
+  const person = await drive.exportPerson(ctx);
+  const manifest = { format: "agentic-drive-export", version: 2, exportedAt: now(), owner: ctx.owner, subject: person.subject, partial: person.partial, items, authored: person.authored, agents: person.agents, shares: person.shares, audit: person.audit };
+  return writeZip([{ name: "manifest.json", data: new TextEncoder().encode(JSON.stringify(manifest, null, 2)) }, ...entries], now());
+}
+
+// src/auth.ts
+import { createStoreAuth } from "agentic-identity";
+import { requirePrincipal } from "agentic-identity/http";
+async function authenticate(request, store, now) {
+  if (!request.headers.has("authorization")) return null;
+  const principal = await requirePrincipal(request, createStoreAuth(store, now ? { now } : {}));
+  if (principal instanceof Response) return null;
+  return { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal };
+}
+
+// src/local.ts
+import { createHash as createHash2 } from "crypto";
+import { join as join2 } from "path";
+import { isMachineMade, isScope, issueCredential, revokeCredential } from "agentic-identity";
+function openLocal(dir) {
+  const store = createFileStore(join2(dir, "db"));
+  return { store, drive: createDrive({ store, blobs: createFileBlobs(join2(dir, "blobs")) }) };
+}
+var AuthError = class extends Error {
+  code = "UNAUTHENTICATED";
+};
+var NO_TOKEN = "no principal: pass --token <key> or set AGENTIC_DRIVE_TOKEN to an API key";
+var BAD_TOKEN = "the key is not valid: it is unknown, revoked, or expired, or its principal is revoked";
+async function resolveToken(store, token) {
+  if (!token) throw new AuthError(NO_TOKEN);
+  let request;
+  try {
+    request = new Request("http://local", { headers: { authorization: `Bearer ${token}` } });
+  } catch {
+    throw new AuthError(BAD_TOKEN);
+  }
+  const ctx = await authenticate(request, store);
+  if (!ctx) throw new AuthError(BAD_TOKEN);
+  return ctx;
+}
+async function addPrincipal(store, id, opts) {
+  if (!/^[A-Za-z0-9_.@-]{1,128}$/.test(id)) throw new Error(`invalid principal id "${id}"`);
+  const scopes = opts.scopes?.length ? opts.scopes : [opts.parent ? "drive:write" : "drive:admin"];
+  const bad = scopes.find((s) => !isScope(s));
+  if (bad !== void 0) throw new Error(`invalid scope "${bad}"`);
+  if (await store.get("principals", id)) throw new Error(`principal "${id}" exists`);
+  if (opts.parent && !await store.get("principals", opts.parent)) throw new Error(`parent "${opts.parent}" does not exist`);
+  const parent = opts.parent ? await store.get("principals", opts.parent) : null;
+  if (parent && parent.kind !== "human") throw new Error(`parent "${opts.parent}" is not a person`);
+  const doc = opts.parent ? { id, kind: "agent_of_human", parentId: opts.parent, scopes } : { id, kind: "human", scopes };
+  await store.put("principals", id, doc);
+  return doc;
+}
+async function revokePrincipal(store, id) {
+  const doc = await store.get("principals", id);
+  if (!doc) throw new DriveError("NOT_FOUND", `principal "${id}" does not exist`);
+  await store.put("principals", id, { ...doc, revokedAt: Date.now() });
+}
+async function issueKey(store, principalId, label) {
+  if (!await store.get("principals", principalId)) throw new Error(`principal "${principalId}" does not exist`);
+  return issueCredential(store, { principalId, kind: "api_key", ...label ? { label } : {} });
+}
+async function revokeKey(store, token) {
+  if (!await store.get("credentials", createHash2("sha256").update(token).digest("hex"))) throw new DriveError("NOT_FOUND", "no such key");
+  await revokeCredential(store, token, Date.now());
+}
+function publicNode(node, path) {
+  const { nameKey: _nameKey, blobKey: _blobKey, purging: _purging, ...rest } = node;
+  const shown = { ...rest, machineMade: isMachineMade(node.createdBy.kind) };
+  return path === void 0 ? shown : { path, ...shown };
+}
+
 export {
   ROOT_ID,
   ACTOR_KINDS,
@@ -1414,11 +1422,14 @@ export {
   subjectKindOf,
   parseSubject,
   createDrive,
+  createFileStore,
+  createFileBlobs,
+  DEFAULT_MAX_BYTES,
+  sniffMime,
+  upload,
   writeZip,
   readZip,
   buildExport,
-  createFileStore,
-  createFileBlobs,
   authenticate,
   openLocal,
   AuthError,
@@ -1428,8 +1439,5 @@ export {
   revokePrincipal,
   issueKey,
   revokeKey,
-  publicNode,
-  DEFAULT_MAX_BYTES,
-  sniffMime,
-  upload
+  publicNode
 };

package/dist/{chunk-WQHJNHAR.js → chunk-H6JK62SP.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import { createRequire } from "module";
-var VERSION = true ? "0.5.0" : readPackageVersion();
+var VERSION = true ? "0.6.1" : readPackageVersion();
 
 export {
   VERSION