agentic-drive 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.6.1
+
+### Changed
+
+- **Bearer tokens are checked by the agentic-identity HTTP helper.** The Worker and the local key check now call `requirePrincipal` from `agentic-identity/http` (agentic-identity 0.6). The package no longer has its own copy of the bearer-token check in `src/auth.ts` and `src/local.ts`. A request without an `authorization` header still gets no caller, so a session cookie does not sign in. A bad key still gives 401, and `resolveToken` still throws `AuthError` with the code `UNAUTHENTICATED`.
+- **The dependency is agentic-identity 0.6.** The package now needs `agentic-identity` `^0.6.0`.
+
 ## 0.6.0
 
 ### Added

package/README.md

@@ -7,7 +7,7 @@
 
 Store, sort, and share files and folders.
 
-> Status: 0.6.0, early. The library, CLI, MCP server, and HTTP API work, with sharing in the SDK and the HTTP API.
+> Status: 0.6.1, early. The library, CLI, MCP server, and HTTP API work, with sharing in the SDK and the HTTP API.
 > A small web UI works. See [UI](#ui).
 
 ## Live demo

package/dist/{chunk-BXFK3QXK.js → chunk-5Z3SFBUK.js}

@@ -1,7 +1,7 @@
 import {
   ROOT_ID,
   rootResource
-} from "./chunk-WJZNXLTR.js";
+} from "./chunk-EAKQK7ST.js";
 
 // src/migrate.ts
 var PAGE = 10;

package/dist/{chunk-WJZNXLTR.js → chunk-EAKQK7ST.js}

@@ -1346,10 +1346,12 @@ async function buildExport(drive, ctx, now = Date.now) {
 
 // src/auth.ts
 import { createStoreAuth } from "agentic-identity";
+import { requirePrincipal } from "agentic-identity/http";
 async function authenticate(request, store, now) {
-  if (!/^Bearer [A-Za-z0-9_-]{1,512}$/.test(request.headers.get("authorization") ?? "")) return null;
-  const principal = await createStoreAuth(store, now ? { now } : {}).authenticate(request);
-  return principal ? { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal } : null;
+  if (!request.headers.has("authorization")) return null;
+  const principal = await requirePrincipal(request, createStoreAuth(store, now ? { now } : {}));
+  if (principal instanceof Response) return null;
+  return { owner: principal.chain[0].id, actor: { id: principal.principalId, kind: principal.kind }, principal };
 }
 
 // src/local.ts
@@ -1367,8 +1369,13 @@ var NO_TOKEN = "no principal: pass --token <key> or set AGENTIC_DRIVE_TOKEN to a
 var BAD_TOKEN = "the key is not valid: it is unknown, revoked, or expired, or its principal is revoked";
 async function resolveToken(store, token) {
   if (!token) throw new AuthError(NO_TOKEN);
-  if (!/^[A-Za-z0-9_-]{1,512}$/.test(token)) throw new AuthError(BAD_TOKEN);
-  const ctx = await authenticate(new Request("http://local", { headers: { authorization: `Bearer ${token}` } }), store);
+  let request;
+  try {
+    request = new Request("http://local", { headers: { authorization: `Bearer ${token}` } });
+  } catch {
+    throw new AuthError(BAD_TOKEN);
+  }
+  const ctx = await authenticate(request, store);
   if (!ctx) throw new AuthError(BAD_TOKEN);
   return ctx;
 }

package/dist/{chunk-ES3NZ7SX.js → chunk-H6JK62SP.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import { createRequire } from "module";
-var VERSION = true ? "0.6.0" : readPackageVersion();
+var VERSION = true ? "0.6.1" : readPackageVersion();
 
 export {
   VERSION

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-ES3NZ7SX.js";
+} from "./chunk-H6JK62SP.js";
 import {
   AuthError,
   DriveError,
@@ -15,7 +15,7 @@ import {
   revokeKey,
   revokePrincipal,
   upload
-} from "./chunk-WJZNXLTR.js";
+} from "./chunk-EAKQK7ST.js";
 
 // src/cli.ts
 import { createReadStream, realpathSync, writeFileSync } from "fs";

package/dist/index.js

@@ -1,10 +1,10 @@
 import {
   VERSION
-} from "./chunk-ES3NZ7SX.js";
+} from "./chunk-H6JK62SP.js";
 import {
   backfillAuthorIds,
   backfillResources
-} from "./chunk-BXFK3QXK.js";
+} from "./chunk-5Z3SFBUK.js";
 import {
   ACTOR_KINDS,
   AuthError,
@@ -29,7 +29,7 @@ import {
   subjectKindOf,
   upload,
   writeZip
-} from "./chunk-WJZNXLTR.js";
+} from "./chunk-EAKQK7ST.js";
 export {
   ACTOR_KINDS,
   AuthError,

package/dist/mcp.js

@@ -1,13 +1,13 @@
 import {
   VERSION
-} from "./chunk-ES3NZ7SX.js";
+} from "./chunk-H6JK62SP.js";
 import {
   ACTOR_KINDS,
   DriveError,
   buildExport,
   publicNode,
   upload
-} from "./chunk-WJZNXLTR.js";
+} from "./chunk-EAKQK7ST.js";
 
 // src/mcp.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/worker.js

@@ -1,7 +1,7 @@
 import {
   backfillAuthorIds,
   backfillResources
-} from "./chunk-BXFK3QXK.js";
+} from "./chunk-5Z3SFBUK.js";
 import {
   DEFAULT_MAX_BYTES,
   DEFAULT_URL_SECONDS,
@@ -12,7 +12,7 @@ import {
   publicNode,
   safeMime,
   upload
-} from "./chunk-WJZNXLTR.js";
+} from "./chunk-EAKQK7ST.js";
 
 // src/worker.ts
 import { Hono } from "hono";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-drive",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Store, sort, and share files and folders.",
   "keywords": [
     "drive",
@@ -73,7 +73,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
     "agentic-design": "^0.1.0",
-    "agentic-identity": "^0.4.0",
+    "agentic-identity": "^0.6.0",
     "hono": "^4.13.14",
     "zod": "^3.25.0"
   },