agentic-drive 0.9.1 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.10.0
+
+### Added
+
+- **Account plug-in.** `driveAccount` (from `agentic-drive/account`, also exported from the root) has `exportAccount` and `eraseAccount`, so a host runs a GDPR export and erase without reading the drive storage layout. The export has `items`, `authored`, `agents`, `grants`, `invites`, `audit`, and `activity`. The erase returns counts, and a second erase counts zero.
+
+### Changed
+
+- Person exports include held grants and sent invites for drive resources only. They no longer include shares for other apps. This also affects the export manifest in the SDK, CLI, MCP, and HTTP API.
+- Reading or exporting an empty drive no longer creates its root. When no root or items exist, a delegated caller needs the `drive:read` scope.
+
 ## 0.9.1
 
 No change to the SDK, CLI, MCP or HTTP shape. Two breaking changes for hosts that pin `agentic-design` or `agentic-identity`, see Breaking.

package/README.md

@@ -7,7 +7,7 @@
 
 Store, sort, and share files and folders.
 
-> Status: 0.9.1, early. The library, CLI, MCP server, and HTTP API work, with sharing in the SDK, the HTTP API, the CLI, and the MCP server.
+> Status: 0.10.0, early. The library, CLI, MCP server, and HTTP API work, with sharing in the SDK, the HTTP API, the CLI, and the MCP server.
 > A small web UI works. See [UI](#ui).
 
 ## Live demo
@@ -163,6 +163,12 @@ The root export, `agentic-drive`, also exports these names. The package typings
   The local functions trust their caller. Local data is the trust boundary: anyone who can write the folder
   can act as any principal in it.
 
+## Account export and erase
+
+A host that runs account export and erase across many packages calls `driveAccount` (from `agentic-drive/account`). It has `exportAccount(subject, { drive, ctx })` and `eraseAccount(subject, { drive, ctx })`, so the host does not read the storage layout. `subject` is an id and a kind (`human`, or `agent` with its own identity), and `ctx` is the drive context of that subject. A context for someone else throws `FORBIDDEN`. A bad subject, or a missing `drive` or `ctx`, throws a `TypeError`.
+
+The checks of an export write access-log rows to `audit`, as every read does. That log is the record of access to personal data. The export writes no other data of the person. The export is plain JSON with `items` (your drive, trashed items flagged, file bytes as base64 in `data`), `authored` (items you made in other drives), `agents`, `grants` (shares you hold on drive items), `invites` (invites you sent on drive items), `audit`, and `activity` (the entries of your changes to items, with your kind). Only an agent with its own identity can be a subject: it gets its own `items` and empty collections. An agent that acts for a person is refused with `FORBIDDEN`. The erase removes your drive with its bytes, the shares you hold on drive items, and the invites you sent on drive items. It returns counts of `items`, `grants`, `invites`, and `anonymized`. `invites` counts only the invites sent on other drives: the invites on your own items go with your drive and are not counted. What you made in other drives stays, with your id set to `erased` and the kind kept. Only the person, not an agent, may erase: an agent subject gets `FORBIDDEN`. A second erase counts zero. The shape is provisional until `agentic-identity` adds its `AccountPackage` contract.
+
 ## UI
 
 The Worker serves a small web UI. It uses the [agentic-design](https://www.npmjs.com/package/agentic-design) package and the typed client of this package (`agentic-drive/client`). It has a folder tree, breadcrumbs, a file list and grid, upload by button or by drag and drop, new folder, rename, move, trash and restore, and a share dialog with roles and a link. An item that an agent made shows a "Created by agent" label while a person is its last editor. "Edited by" names the last editor, a person or an agent. It works with the keyboard. An automated axe check for WCAG 2.2 AA passes on each view in the light and dark themes.

package/dist/account.d.ts

@@ -0,0 +1,28 @@
+import { b as Actor, D as Drive, C as Ctx } from './drive-BhMTeQ-s.js';
+import 'agentic-identity';
+
+interface DriveAccountDeps {
+    drive: Drive;
+    /** The subject's own context. The package checks that it names the subject, in person. */
+    ctx: Ctx;
+}
+type JsonRecord = Record<string, unknown>;
+interface DriveAccount {
+    id: "drive";
+    /**
+     * Collections: `items` (the subject's own drive, trashed ones flagged, a file with its bytes as base64 in `data`),
+     * `authored` (ids of items the subject made or changed in other drives), `agents` (the drives of agents
+     * that belong to the subject, with no bytes), `grants` (shares the subject holds on drive items), `invites` (invites the subject sent on drive items),
+     * `audit` (what the subject did), and `activity` (the entries of the subject's changes to items). Only an agent with its own identity can be a subject: it gets its own `items` and empty collections, and the export does not say that these are partial. An agent that acts for a person has a context for that person, and is refused.
+     */
+    exportAccount(subject: Actor, deps: DriveAccountDeps): Promise<Record<"items" | "authored" | "agents" | "grants" | "invites" | "audit" | "activity", JsonRecord[]>>;
+    /**
+     * Erases the subject's drive with all its bytes, the shares they hold, and the invites they sent, on drive items only.
+     * What the subject made in other drives stays, with the id set to "erased" and the kind kept. Counts by `items`, `grants`,
+     * `invites`, and `anonymized`. `invites` counts only the invites on items of other drives: the ones on the subject's own items go with the drive, and are not counted. A repeat counts what is left, so it is zero after a full run. Only the person, not an agent, may erase: an agent subject is refused.
+     */
+    eraseAccount(subject: Actor, deps: DriveAccountDeps): Promise<Record<"items" | "grants" | "invites" | "anonymized", number>>;
+}
+declare const driveAccount: DriveAccount;
+
+export { type DriveAccount, type DriveAccountDeps, driveAccount };

package/dist/account.js

@@ -0,0 +1,7 @@
+import {
+  driveAccount
+} from "./chunk-ECVUDAHL.js";
+import "./chunk-DB4F5EWD.js";
+export {
+  driveAccount
+};

package/dist/{chunk-622NAJ6K.js → chunk-DB4F5EWD.js}

@@ -1,5 +1,5 @@
 // src/drive.ts
-import { EraseRefusedError, isMachineMade, StoreConflictError, MAX_FOLDER_DEPTH, PRINCIPAL_KINDS, ROLES, SUBJECT_KINDS } from "agentic-identity";
+import { EraseRefusedError, isMachineMade, StoreConflictError, MAX_FOLDER_DEPTH, PRINCIPAL_KINDS, ROLES, SUBJECT_KINDS, hasScope } from "agentic-identity";
 var ROOT_ID = "root";
 var NODES = "drive_nodes";
 var NAMES = "drive_names";
@@ -477,6 +477,16 @@ function createDrive(deps) {
     if (!await can(ctx, "read", rootNode(ctx.owner, ctx.actor))) throw new DriveError("FORBIDDEN", "not allowed to read this drive");
     return rawOwnerNodes(ctx.owner, withMarked);
   }
+  async function readOwnerRoot(ctx) {
+    if (sharing && ctx.principal !== void 0 && await store.get("resources", await rootResource(ctx.owner)) === null) {
+      if ((await rawOwnerNodes(ctx.owner, true)).length === 0) {
+        if (hasScope(ctx.principal.scopes, "drive:read")) return;
+        throw new DriveError("FORBIDDEN", "not allowed to read this drive");
+      }
+      await prepare(ctx);
+    }
+    if (!await can(ctx, "read", rootNode(ctx.owner, ctx.actor))) throw new DriveError("FORBIDDEN", "not allowed to read this drive");
+  }
   function pathIn(byId, node, liveOnly) {
     const names = [];
     for (let n = node, depth = 0; depth < 1e3; depth++) {
@@ -886,7 +896,8 @@ function createDrive(deps) {
     },
     /** Every item of the owner, trashed or not, with its original path and bytes. For export. */
     async exportData(ctx) {
-      const all = await ownerNodes(ctx);
+      await readOwnerRoot(ctx);
+      const all = await rawOwnerNodes(ctx.owner, false);
       const byId = new Map(all.map((n) => [n.id, n]));
       const out = [];
       for (const node of all.sort((a, b) => a.id < b.id ? -1 : 1)) {
@@ -1030,11 +1041,11 @@ function createDrive(deps) {
      * What drive holds about the person behind a call, besides their own drive (`exportData` has that). It is
      * only for the person in person: an agent gets `partial: true` and nothing else. It holds the ids of the
      * items they or their agents made or changed in other drives (no names, and nothing of the people who own
-     * them), the shares they hold, the invites they sent, and the audit entries of what they and their agents
-     * did. Invitee emails and link tokens are not in it.
+     * them), the shares they hold and the invites they sent on drive items, and the audit entries of what they and
+     * their agents did. Invitee emails and link tokens are not in it.
      */
     async exportPerson(ctx) {
-      await need(ctx, "read", rootNode(ctx.owner, ctx.actor));
+      await readOwnerRoot(ctx);
       const subject = subjectOf(ctx);
       if (!isInPerson(ctx)) return { subject, partial: true, authored: [], agents: [], shares: { held: [], invitesCreated: [] }, audit: [], activity: [] };
       const { actors, ownedAgents } = await actorsOf(store, subject.id);
@@ -1047,8 +1058,9 @@ function createDrive(deps) {
         updatedAt: actors.includes(n.updatedById) ? n.updatedAt : null,
         by: [...new Set([actors.includes(n.createdById) ? n.createdBy : null, actors.includes(n.updatedById) ? n.updatedBy : null].filter((a) => a !== null).map((a) => JSON.stringify(a)))].map((a) => JSON.parse(a))
       })).sort((x, y) => x.id < y.id ? -1 : 1);
+      const onDrive = async (resourceId) => typeof resourceId === "string" && (await store.get("resources", resourceId))?.type === "drive";
       const held = [];
-      for (const [actor, kind] of heldBy(subject, ownedAgents)) for (const g of await allWhere(store, "grants", { subjectId: actor, subjectKind: kind })) held.push({ subjectKind: g.data.subjectKind, subjectId: g.data.subjectId, resourceId: g.data.resourceId, role: g.data.role });
+      for (const [actor, kind] of heldBy(subject, ownedAgents)) for (const g of await allWhere(store, "grants", { subjectId: actor, subjectKind: kind })) if (await onDrive(g.data.resourceId)) held.push({ subjectKind: g.data.subjectKind, subjectId: g.data.subjectId, resourceId: g.data.resourceId, role: g.data.role });
       const agents = [];
       for (const agent of ownedAgents) {
         const items = (await rawOwnerNodes(agent, false)).map((n) => ({ id: n.id, kind: n.kind, name: n.name, size: n.size, mime: n.mime, createdAt: n.createdAt, updatedAt: n.updatedAt, trashed: n.trashed }));
@@ -1058,6 +1070,7 @@ function createDrive(deps) {
       const audit = [];
       for (const actor of actors) {
         for (const i of await allWhere(store, "invites", { createdBy: actor })) {
+          if (!await onDrive(i.data.resourceId)) continue;
           invitesCreated.push({ id: i.data.id, resourceId: i.data.resourceId, role: i.data.role, expiresAt: i.data.expiresAt ?? null, accepted: i.data.acceptedAt !== void 0 });
         }
         for (const e of await allWhere(store, "audit", { principalId: actor }, { field: "at" })) {
@@ -1223,9 +1236,10 @@ function createDrive(deps) {
       throw error;
     }
   }
-  async function prepare(ctx) {
+  async function prepare(ctx, create = true) {
     if (!sharing || ctx.principal === void 0) return;
     if (ctx.principal.chain[0]?.id !== ctx.owner) throw new DriveError("FORBIDDEN", "the caller does not own this drive");
+    if (!create) return;
     const id = await rootResource(ctx.owner);
     if ((await store.get("resources", id))?.type === "drive") return;
     try {
@@ -1233,203 +1247,13 @@ function createDrive(deps) {
     } catch {
     }
   }
-  const guarded = (call) => async (ctx, ...args) => {
-    await prepare(ctx);
+  const guarded = (call, create = true) => async (ctx, ...args) => {
+    await prepare(ctx, create);
     return call(ctx, ...args);
   };
   const open = /* @__PURE__ */ new Set(["openShared", "listShared", "readShared"]);
-  return Object.fromEntries(Object.entries(api).map(([name, call]) => [name, open.has(name) ? call : guarded(call)]));
-}
-
-// src/upload.ts
-var DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
-var SIGNATURES = [
-  [[137, 80, 78, 71, 13, 10, 26, 10], "image/png"],
-  [[255, 216, 255], "image/jpeg"],
-  [[71, 73, 70, 56], "image/gif"],
-  [[37, 80, 68, 70, 45], "application/pdf"],
-  [[80, 75, 3, 4], "application/zip"],
-  [[31, 139], "application/gzip"]
-];
-function sniffMime(head) {
-  const hit = SIGNATURES.find(([sig]) => sig.every((byte, i) => head[i] === byte));
-  if (hit) return hit[1];
-  const isWebp = [..."RIFF"].every((c, i) => head[i] === c.charCodeAt(0)) && [..."WEBP"].every((c, i) => head[8 + i] === c.charCodeAt(0));
-  return isWebp ? "image/webp" : null;
-}
-function looksLikeText(head) {
-  if (head.includes(0)) return false;
-  for (let cut = 0; cut < 4 && cut <= head.length; cut++) {
-    try {
-      new TextDecoder("utf-8", { fatal: true }).decode(head.subarray(0, head.length - cut));
-      return true;
-    } catch {
-      continue;
-    }
-  }
-  return false;
-}
-async function* iterate(source) {
-  if (Symbol.asyncIterator in source) {
-    yield* source;
-    return;
-  }
-  const reader = source.getReader();
-  try {
-    for (; ; ) {
-      const { done, value } = await reader.read();
-      if (done) return;
-      yield value;
-    }
-  } finally {
-    reader.releaseLock();
-  }
-}
-async function upload(drive, ctx, path, source, opts = {}) {
-  const max = opts.maxBytes ?? DEFAULT_MAX_BYTES;
-  const parts = [];
-  let size = 0;
-  for await (const chunk of iterate(source)) {
-    size += chunk.byteLength;
-    if (size > max) throw new DriveError("TOO_LARGE", `upload is over the limit of ${max} bytes`);
-    parts.push(chunk);
-  }
-  const data = new Uint8Array(size);
-  for (let at = 0, i = 0; i < parts.length; at += parts[i].byteLength, i++) data.set(parts[i], at);
-  const head = data.subarray(0, 512);
-  const mime = sniffMime(head) ?? (opts.mime !== void 0 ? safeMime(opts.mime) : looksLikeText(head) ? "text/plain" : "application/octet-stream");
-  return drive.putFile(ctx, path, data, { mime, parents: opts.parents, onConflict: opts.onConflict });
-}
-
-// src/zip.ts
-var CRC_TABLE = Array.from({ length: 256 }, (_, n) => {
-  let c = n;
-  for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
-  return c >>> 0;
-});
-function crc32(data) {
-  let crc = 4294967295;
-  for (const byte of data) crc = CRC_TABLE[(crc ^ byte) & 255] ^ crc >>> 8;
-  return (crc ^ 4294967295) >>> 0;
-}
-function safeEntryName(name) {
-  if (name === "" || /[\\\u0000]/.test(name) || name.startsWith("/") || /^[a-zA-Z]:/.test(name)) return false;
-  return name.split("/").every((part) => part !== "" && part !== "." && part !== "..");
-}
-function writeZip(entries, at) {
-  for (const { name } of entries) if (!safeEntryName(name)) throw new Error(`zip: unsafe entry name ${JSON.stringify(name)}`);
-  const d = new Date(at);
-  const time = d.getUTCHours() << 11 | d.getUTCMinutes() << 5 | d.getUTCSeconds() >> 1;
-  const date = Math.max(d.getUTCFullYear(), 1980) - 1980 << 9 | d.getUTCMonth() + 1 << 5 | d.getUTCDate();
-  const parts = [];
-  const central = [];
-  let offset = 0;
-  const u16 = (v, o, n) => v.setUint16(o, n, true);
-  const u32 = (v, o, n) => v.setUint32(o, n, true);
-  for (const entry of entries) {
-    const name = new TextEncoder().encode(entry.name);
-    const crc = crc32(entry.data);
-    if (entry.data.byteLength >= 4294967295 || offset >= 4294967295 || entries.length >= 65535) throw new Error("zip: export is too large for a plain zip");
-    const local = new DataView(new ArrayBuffer(30));
-    u32(local, 0, 67324752);
-    u16(local, 4, 20);
-    u16(local, 6, 2048);
-    u16(local, 8, 0);
-    u16(local, 10, time);
-    u16(local, 12, date);
-    u32(local, 14, crc);
-    u32(local, 18, entry.data.byteLength);
-    u32(local, 22, entry.data.byteLength);
-    u16(local, 26, name.length);
-    u16(local, 28, 0);
-    const head = new DataView(new ArrayBuffer(46));
-    u32(head, 0, 33639248);
-    u16(head, 4, 20);
-    u16(head, 6, 20);
-    u16(head, 8, 2048);
-    u16(head, 10, 0);
-    u16(head, 12, time);
-    u16(head, 14, date);
-    u32(head, 16, crc);
-    u32(head, 20, entry.data.byteLength);
-    u32(head, 24, entry.data.byteLength);
-    u16(head, 28, name.length);
-    u32(head, 42, offset);
-    parts.push(new Uint8Array(local.buffer), name, entry.data);
-    central.push(new Uint8Array(head.buffer), name);
-    offset += 30 + name.length + entry.data.byteLength;
-  }
-  const size = central.reduce((n, p) => n + p.byteLength, 0);
-  const end = new DataView(new ArrayBuffer(22));
-  u32(end, 0, 101010256);
-  u16(end, 8, entries.length);
-  u16(end, 10, entries.length);
-  u32(end, 12, size);
-  u32(end, 16, offset);
-  const all = [...parts, ...central, new Uint8Array(end.buffer)];
-  const out = new Uint8Array(all.reduce((n, p) => n + p.byteLength, 0));
-  let at2 = 0;
-  for (const p of all) {
-    out.set(p, at2);
-    at2 += p.byteLength;
-  }
-  return out;
-}
-function readZip(bytes) {
-  const v = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  let end = bytes.byteLength - 22;
-  while (end >= 0 && v.getUint32(end, true) !== 101010256) end--;
-  if (end < 0) throw new Error("zip: no end signature");
-  const count = v.getUint16(end + 10, true);
-  const out = /* @__PURE__ */ new Map();
-  for (let i = 0, at = v.getUint32(end + 16, true); i < count; i++) {
-    if (v.getUint32(at, true) !== 33639248) throw new Error("zip: bad central signature");
-    if (v.getUint16(at + 10, true) !== 0) throw new Error("zip: compressed entries are not supported");
-    const crc = v.getUint32(at + 16, true);
-    const size = v.getUint32(at + 24, true);
-    const nameLen = v.getUint16(at + 28, true);
-    const local = v.getUint32(at + 42, true);
-    const name = new TextDecoder().decode(bytes.subarray(at + 46, at + 46 + nameLen));
-    if (v.getUint32(local, true) !== 67324752) throw new Error("zip: bad local signature");
-    const start = local + 30 + v.getUint16(local + 26, true) + v.getUint16(local + 28, true);
-    const data = bytes.slice(start, start + size);
-    if (crc32(data) !== crc) throw new Error(`zip: crc mismatch in ${name}`);
-    out.set(name, data);
-    at += 46 + nameLen + v.getUint16(at + 30, true) + v.getUint16(at + 32, true);
-  }
-  return out;
-}
-
-// src/export.ts
-async function buildExport(drive, ctx, now = Date.now) {
-  const entries = [];
-  const items = (await drive.exportData(ctx)).map(({ node, path, data, missing }) => {
-    const file = data ? `files/${node.id}` : null;
-    if (data && file) entries.push({ name: file, data });
-    return {
-      id: node.id,
-      owner: node.owner,
-      path,
-      parentId: node.parentId,
-      kind: node.kind,
-      name: node.name,
-      size: node.size,
-      mime: node.mime,
-      hash: node.hash,
-      ref: node.ref,
-      createdAt: node.createdAt,
-      updatedAt: node.updatedAt,
-      createdBy: node.createdBy,
-      updatedBy: node.updatedBy,
-      trashed: node.trashed,
-      trashedAt: node.trashedAt,
-      file,
-      ...missing ? { missing: true } : {}
-    };
-  });
-  const person = await drive.exportPerson(ctx);
-  const manifest = { format: "agentic-drive-export", version: 2, exportedAt: now(), owner: ctx.owner, subject: person.subject, partial: person.partial, items, authored: person.authored, agents: person.agents, shares: person.shares, audit: person.audit, activity: person.activity };
-  return writeZip([{ name: "manifest.json", data: new TextEncoder().encode(JSON.stringify(manifest, null, 2)) }, ...entries], now());
+  const reads = /* @__PURE__ */ new Set(["exportData", "exportPerson"]);
+  return Object.fromEntries(Object.entries(api).map(([name, call]) => [name, open.has(name) ? call : guarded(call, !reads.has(name))]));
 }
 
 // src/auth.ts
@@ -1589,12 +1413,6 @@ export {
   subjectKindOf,
   parseSubject,
   createDrive,
-  DEFAULT_MAX_BYTES,
-  sniffMime,
-  upload,
-  writeZip,
-  readZip,
-  buildExport,
   authenticate,
   inviteIdentity,
   backfillAuthorIds,

package/dist/chunk-ECVUDAHL.js

@@ -0,0 +1,49 @@
+import {
+  DriveError,
+  publicNode
+} from "./chunk-DB4F5EWD.js";
+
+// src/account.ts
+var plain = (value) => JSON.parse(JSON.stringify(value));
+function check(subject, deps) {
+  const { drive, ctx } = deps ?? {};
+  if (typeof drive?.exportData !== "function" || typeof drive.exportPerson !== "function" || typeof drive.erasePerson !== "function" || typeof ctx !== "object" || ctx === null) throw new TypeError("driveAccount needs deps.drive and deps.ctx");
+  const known = subject?.kind === "human" || subject?.kind === "agent";
+  if (typeof subject?.id !== "string" || subject.id.trim() === "" || !known) throw new TypeError("subject needs an id and a kind of human or agent");
+  if (ctx.owner !== subject.id || ctx.actor?.id !== subject.id || ctx.actor.kind !== subject.kind) throw new DriveError("FORBIDDEN", "context does not match the subject");
+  const p = ctx.principal;
+  if (p !== void 0 && (p?.principalId !== subject.id || p.kind !== subject.kind || p.chain?.length !== 1 || p.chain[0]?.id !== subject.id || p.chain[0]?.kind !== subject.kind)) throw new DriveError("FORBIDDEN", "context does not match the subject");
+}
+var b64 = (data) => {
+  let bin = "";
+  for (let i = 0; i < data.length; i += 32768) bin += String.fromCharCode(...data.subarray(i, i + 32768));
+  return btoa(bin);
+};
+var driveAccount = {
+  id: "drive",
+  async exportAccount(subject, deps) {
+    check(subject, deps);
+    const { drive, ctx } = deps;
+    const person = await drive.exportPerson(ctx);
+    if (person.partial && subject.kind === "human") throw new DriveError("FORBIDDEN", "the person's export is partial");
+    const items = (await drive.exportData(ctx)).map(({ node, path, data, missing }) => ({ ...publicNode(node, path), data: data ? b64(data) : null, ...missing ? { missing: true } : {} }));
+    return {
+      items: plain(items),
+      authored: plain(person.authored),
+      agents: plain(person.agents),
+      grants: plain(person.shares.held),
+      invites: plain(person.shares.invitesCreated),
+      audit: plain(person.audit),
+      activity: plain(person.activity)
+    };
+  },
+  async eraseAccount(subject, deps) {
+    check(subject, deps);
+    const { removed, grants, invites, anonymized } = await deps.drive.erasePerson(deps.ctx);
+    return { items: removed, grants, invites, anonymized };
+  }
+};
+
+export {
+  driveAccount
+};

package/dist/chunk-HJXRMOUY.js

@@ -0,0 +1,204 @@
+import {
+  DriveError,
+  safeMime
+} from "./chunk-DB4F5EWD.js";
+
+// src/upload.ts
+var DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
+var SIGNATURES = [
+  [[137, 80, 78, 71, 13, 10, 26, 10], "image/png"],
+  [[255, 216, 255], "image/jpeg"],
+  [[71, 73, 70, 56], "image/gif"],
+  [[37, 80, 68, 70, 45], "application/pdf"],
+  [[80, 75, 3, 4], "application/zip"],
+  [[31, 139], "application/gzip"]
+];
+function sniffMime(head) {
+  const hit = SIGNATURES.find(([sig]) => sig.every((byte, i) => head[i] === byte));
+  if (hit) return hit[1];
+  const isWebp = [..."RIFF"].every((c, i) => head[i] === c.charCodeAt(0)) && [..."WEBP"].every((c, i) => head[8 + i] === c.charCodeAt(0));
+  return isWebp ? "image/webp" : null;
+}
+function looksLikeText(head) {
+  if (head.includes(0)) return false;
+  for (let cut = 0; cut < 4 && cut <= head.length; cut++) {
+    try {
+      new TextDecoder("utf-8", { fatal: true }).decode(head.subarray(0, head.length - cut));
+      return true;
+    } catch {
+      continue;
+    }
+  }
+  return false;
+}
+async function* iterate(source) {
+  if (Symbol.asyncIterator in source) {
+    yield* source;
+    return;
+  }
+  const reader = source.getReader();
+  try {
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) return;
+      yield value;
+    }
+  } finally {
+    reader.releaseLock();
+  }
+}
+async function upload(drive, ctx, path, source, opts = {}) {
+  const max = opts.maxBytes ?? DEFAULT_MAX_BYTES;
+  const parts = [];
+  let size = 0;
+  for await (const chunk of iterate(source)) {
+    size += chunk.byteLength;
+    if (size > max) throw new DriveError("TOO_LARGE", `upload is over the limit of ${max} bytes`);
+    parts.push(chunk);
+  }
+  const data = new Uint8Array(size);
+  for (let at = 0, i = 0; i < parts.length; at += parts[i].byteLength, i++) data.set(parts[i], at);
+  const head = data.subarray(0, 512);
+  const mime = sniffMime(head) ?? (opts.mime !== void 0 ? safeMime(opts.mime) : looksLikeText(head) ? "text/plain" : "application/octet-stream");
+  return drive.putFile(ctx, path, data, { mime, parents: opts.parents, onConflict: opts.onConflict });
+}
+
+// src/zip.ts
+var CRC_TABLE = Array.from({ length: 256 }, (_, n) => {
+  let c = n;
+  for (let k = 0; k < 8; k++) c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+  return c >>> 0;
+});
+function crc32(data) {
+  let crc = 4294967295;
+  for (const byte of data) crc = CRC_TABLE[(crc ^ byte) & 255] ^ crc >>> 8;
+  return (crc ^ 4294967295) >>> 0;
+}
+function safeEntryName(name) {
+  if (name === "" || /[\\\u0000]/.test(name) || name.startsWith("/") || /^[a-zA-Z]:/.test(name)) return false;
+  return name.split("/").every((part) => part !== "" && part !== "." && part !== "..");
+}
+function writeZip(entries, at) {
+  for (const { name } of entries) if (!safeEntryName(name)) throw new Error(`zip: unsafe entry name ${JSON.stringify(name)}`);
+  const d = new Date(at);
+  const time = d.getUTCHours() << 11 | d.getUTCMinutes() << 5 | d.getUTCSeconds() >> 1;
+  const date = Math.max(d.getUTCFullYear(), 1980) - 1980 << 9 | d.getUTCMonth() + 1 << 5 | d.getUTCDate();
+  const parts = [];
+  const central = [];
+  let offset = 0;
+  const u16 = (v, o, n) => v.setUint16(o, n, true);
+  const u32 = (v, o, n) => v.setUint32(o, n, true);
+  for (const entry of entries) {
+    const name = new TextEncoder().encode(entry.name);
+    const crc = crc32(entry.data);
+    if (entry.data.byteLength >= 4294967295 || offset >= 4294967295 || entries.length >= 65535) throw new Error("zip: export is too large for a plain zip");
+    const local = new DataView(new ArrayBuffer(30));
+    u32(local, 0, 67324752);
+    u16(local, 4, 20);
+    u16(local, 6, 2048);
+    u16(local, 8, 0);
+    u16(local, 10, time);
+    u16(local, 12, date);
+    u32(local, 14, crc);
+    u32(local, 18, entry.data.byteLength);
+    u32(local, 22, entry.data.byteLength);
+    u16(local, 26, name.length);
+    u16(local, 28, 0);
+    const head = new DataView(new ArrayBuffer(46));
+    u32(head, 0, 33639248);
+    u16(head, 4, 20);
+    u16(head, 6, 20);
+    u16(head, 8, 2048);
+    u16(head, 10, 0);
+    u16(head, 12, time);
+    u16(head, 14, date);
+    u32(head, 16, crc);
+    u32(head, 20, entry.data.byteLength);
+    u32(head, 24, entry.data.byteLength);
+    u16(head, 28, name.length);
+    u32(head, 42, offset);
+    parts.push(new Uint8Array(local.buffer), name, entry.data);
+    central.push(new Uint8Array(head.buffer), name);
+    offset += 30 + name.length + entry.data.byteLength;
+  }
+  const size = central.reduce((n, p) => n + p.byteLength, 0);
+  const end = new DataView(new ArrayBuffer(22));
+  u32(end, 0, 101010256);
+  u16(end, 8, entries.length);
+  u16(end, 10, entries.length);
+  u32(end, 12, size);
+  u32(end, 16, offset);
+  const all = [...parts, ...central, new Uint8Array(end.buffer)];
+  const out = new Uint8Array(all.reduce((n, p) => n + p.byteLength, 0));
+  let at2 = 0;
+  for (const p of all) {
+    out.set(p, at2);
+    at2 += p.byteLength;
+  }
+  return out;
+}
+function readZip(bytes) {
+  const v = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+  let end = bytes.byteLength - 22;
+  while (end >= 0 && v.getUint32(end, true) !== 101010256) end--;
+  if (end < 0) throw new Error("zip: no end signature");
+  const count = v.getUint16(end + 10, true);
+  const out = /* @__PURE__ */ new Map();
+  for (let i = 0, at = v.getUint32(end + 16, true); i < count; i++) {
+    if (v.getUint32(at, true) !== 33639248) throw new Error("zip: bad central signature");
+    if (v.getUint16(at + 10, true) !== 0) throw new Error("zip: compressed entries are not supported");
+    const crc = v.getUint32(at + 16, true);
+    const size = v.getUint32(at + 24, true);
+    const nameLen = v.getUint16(at + 28, true);
+    const local = v.getUint32(at + 42, true);
+    const name = new TextDecoder().decode(bytes.subarray(at + 46, at + 46 + nameLen));
+    if (v.getUint32(local, true) !== 67324752) throw new Error("zip: bad local signature");
+    const start = local + 30 + v.getUint16(local + 26, true) + v.getUint16(local + 28, true);
+    const data = bytes.slice(start, start + size);
+    if (crc32(data) !== crc) throw new Error(`zip: crc mismatch in ${name}`);
+    out.set(name, data);
+    at += 46 + nameLen + v.getUint16(at + 30, true) + v.getUint16(at + 32, true);
+  }
+  return out;
+}
+
+// src/export.ts
+async function buildExport(drive, ctx, now = Date.now) {
+  const entries = [];
+  const items = (await drive.exportData(ctx)).map(({ node, path, data, missing }) => {
+    const file = data ? `files/${node.id}` : null;
+    if (data && file) entries.push({ name: file, data });
+    return {
+      id: node.id,
+      owner: node.owner,
+      path,
+      parentId: node.parentId,
+      kind: node.kind,
+      name: node.name,
+      size: node.size,
+      mime: node.mime,
+      hash: node.hash,
+      ref: node.ref,
+      createdAt: node.createdAt,
+      updatedAt: node.updatedAt,
+      createdBy: node.createdBy,
+      updatedBy: node.updatedBy,
+      trashed: node.trashed,
+      trashedAt: node.trashedAt,
+      file,
+      ...missing ? { missing: true } : {}
+    };
+  });
+  const person = await drive.exportPerson(ctx);
+  const manifest = { format: "agentic-drive-export", version: 2, exportedAt: now(), owner: ctx.owner, subject: person.subject, partial: person.partial, items, authored: person.authored, agents: person.agents, shares: person.shares, audit: person.audit, activity: person.activity };
+  return writeZip([{ name: "manifest.json", data: new TextEncoder().encode(JSON.stringify(manifest, null, 2)) }, ...entries], now());
+}
+
+export {
+  DEFAULT_MAX_BYTES,
+  sniffMime,
+  upload,
+  writeZip,
+  readZip,
+  buildExport
+};

package/dist/{chunk-D6KW6NVM.js → chunk-NHHBNW64.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import { createRequire } from "module";
-var VERSION = true ? "0.9.1" : readPackageVersion();
+var VERSION = true ? "0.10.0" : readPackageVersion();
 
 export {
   VERSION

package/dist/cli.js

@@ -4,13 +4,16 @@ import {
 } from "./chunk-AB2RTTHJ.js";
 import {
   VERSION
-} from "./chunk-D6KW6NVM.js";
+} from "./chunk-NHHBNW64.js";
+import {
+  buildExport,
+  upload
+} from "./chunk-HJXRMOUY.js";
 import {
   AuthError,
   DriveError,
   NO_TOKEN,
   addPrincipal,
-  buildExport,
   ensureSharing,
   inviteIdentity,
   issueKey,
@@ -18,9 +21,8 @@ import {
   publicNode,
   resolveToken,
   revokeKey,
-  revokePrincipal,
-  upload
-} from "./chunk-622NAJ6K.js";
+  revokePrincipal
+} from "./chunk-DB4F5EWD.js";
 
 // src/cli.ts
 import { createReadStream, realpathSync, writeFileSync } from "fs";

package/dist/client.d.ts

@@ -1,5 +1,5 @@
-import { E as ErrorCode, N as Node, A as ActivityEntry, S as SearchQuery } from './drive-BRg1Uj_3.js';
-export { a as ActivityAction } from './drive-BRg1Uj_3.js';
+import { E as ErrorCode, N as Node, A as ActivityEntry, S as SearchQuery } from './drive-BhMTeQ-s.js';
+export { a as ActivityAction } from './drive-BhMTeQ-s.js';
 import 'agentic-identity';
 
 type Role = "viewer" | "commenter" | "editor" | "owner";

package/dist/{drive-BRg1Uj_3.d.ts → drive-BhMTeQ-s.d.ts}

@@ -1,5 +1,5 @@
 import * as agentic_identity from 'agentic-identity';
-import { PrincipalKind, PrincipalContext, Store, Blobs, createSharing, Subject, Role, SubjectKind } from 'agentic-identity';
+import { PrincipalKind, Store, Blobs, PrincipalContext, createSharing, Subject, Role, SubjectKind } from 'agentic-identity';
 
 declare const ROOT_ID = "root";
 declare const ACTOR_KINDS: readonly ["human", "agent_of_human", "agent_of_agent", "agent", "user_token"];
@@ -242,8 +242,8 @@ declare function createDrive(deps: DriveDeps): {
      * What drive holds about the person behind a call, besides their own drive (`exportData` has that). It is
      * only for the person in person: an agent gets `partial: true` and nothing else. It holds the ids of the
      * items they or their agents made or changed in other drives (no names, and nothing of the people who own
-     * them), the shares they hold, the invites they sent, and the audit entries of what they and their agents
-     * did. Invitee emails and link tokens are not in it.
+     * them), the shares they hold and the invites they sent on drive items, and the audit entries of what they and
+     * their agents did. Invitee emails and link tokens are not in it.
      */
     exportPerson(ctx: Ctx): Promise<{
         subject: {

package/dist/index.d.ts

@@ -1,7 +1,8 @@
-import { O as OnConflict, D as Drive, C as Ctx, N as Node, b as Actor } from './drive-BRg1Uj_3.js';
-export { c as ACTOR_KINDS, d as Action, a as ActivityAction, A as ActivityEntry, e as ActorKind, f as Can, g as DriveDeps, h as DriveError, i as ERROR_STATUS, E as ErrorCode, R as ROOT_ID, S as SearchQuery, j as createDrive, p as parseName, k as parseSubject, s as subjectKindOf } from './drive-BRg1Uj_3.js';
+import { O as OnConflict, D as Drive, C as Ctx, N as Node, b as Actor } from './drive-BhMTeQ-s.js';
+export { c as ACTOR_KINDS, d as Action, a as ActivityAction, A as ActivityEntry, e as ActorKind, f as Can, g as DriveDeps, h as DriveError, i as ERROR_STATUS, E as ErrorCode, R as ROOT_ID, S as SearchQuery, j as createDrive, p as parseName, k as parseSubject, s as subjectKindOf } from './drive-BhMTeQ-s.js';
 import { Store, Blobs, Doc } from 'agentic-identity';
 export { B as BackfillOptions, a as BackfillResult, b as backfillAuthorIds, c as backfillResources } from './migrate-B79gRPMu.js';
+export { DriveAccount, DriveAccountDeps, driveAccount } from './account.js';
 
 declare const VERSION: string;
 

package/dist/index.js

@@ -1,35 +1,40 @@
+import {
+  driveAccount
+} from "./chunk-ECVUDAHL.js";
 import {
   importLegacyLocal
 } from "./chunk-AB2RTTHJ.js";
 import {
   VERSION
-} from "./chunk-D6KW6NVM.js";
+} from "./chunk-NHHBNW64.js";
+import {
+  DEFAULT_MAX_BYTES,
+  buildExport,
+  readZip,
+  sniffMime,
+  upload,
+  writeZip
+} from "./chunk-HJXRMOUY.js";
 import {
   ACTOR_KINDS,
   AuthError,
-  DEFAULT_MAX_BYTES,
   DriveError,
   ERROR_STATUS,
   ROOT_ID,
   addPrincipal,
   backfillAuthorIds,
   backfillResources,
-  buildExport,
   createDrive,
   issueKey,
   openLocal,
   parseName,
   parseSubject,
   publicNode,
-  readZip,
   resolveToken,
   revokeKey,
   revokePrincipal,
-  sniffMime,
-  subjectKindOf,
-  upload,
-  writeZip
-} from "./chunk-622NAJ6K.js";
+  subjectKindOf
+} from "./chunk-DB4F5EWD.js";
 export {
   ACTOR_KINDS,
   AuthError,
@@ -43,6 +48,7 @@ export {
   backfillResources,
   buildExport,
   createDrive,
+  driveAccount,
   importLegacyLocal,
   issueKey,
   openLocal,

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { D as Drive, C as Ctx } from './drive-BRg1Uj_3.js';
+import { D as Drive, C as Ctx } from './drive-BhMTeQ-s.js';
 import { Store } from 'agentic-identity';
 
 declare function createMcpServer(drive: Drive, ctx: Ctx, exportDir: string, store: Store): McpServer;

package/dist/mcp.js

@@ -1,14 +1,16 @@
 import {
   VERSION
-} from "./chunk-D6KW6NVM.js";
+} from "./chunk-NHHBNW64.js";
+import {
+  buildExport,
+  upload
+} from "./chunk-HJXRMOUY.js";
 import {
   ACTOR_KINDS,
   DriveError,
-  buildExport,
   inviteIdentity,
-  publicNode,
-  upload
-} from "./chunk-622NAJ6K.js";
+  publicNode
+} from "./chunk-DB4F5EWD.js";
 
 // src/mcp.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";

package/dist/worker.d.ts

@@ -1,8 +1,8 @@
 import { Hono } from 'hono';
 import { D1Like, R2Like } from 'agentic-identity/cloudflare';
 import { Store, Blobs } from 'agentic-identity';
-import { C as Ctx, D as Drive } from './drive-BRg1Uj_3.js';
-export { i as ERROR_STATUS, E as ErrorCode, N as Node } from './drive-BRg1Uj_3.js';
+import { C as Ctx, D as Drive } from './drive-BhMTeQ-s.js';
+export { i as ERROR_STATUS, E as ErrorCode, N as Node } from './drive-BhMTeQ-s.js';
 export { B as BackfillOptions, a as BackfillResult, b as backfillAuthorIds, c as backfillResources } from './migrate-B79gRPMu.js';
 
 /**

package/dist/worker.js

@@ -1,18 +1,20 @@
 import {
   DEFAULT_MAX_BYTES,
+  buildExport,
+  upload
+} from "./chunk-HJXRMOUY.js";
+import {
   DEFAULT_URL_SECONDS,
   DriveError,
   ERROR_STATUS,
   authenticate,
   backfillAuthorIds,
   backfillResources,
-  buildExport,
   createDrive,
   inviteIdentity,
   publicNode,
-  safeMime,
-  upload
-} from "./chunk-622NAJ6K.js";
+  safeMime
+} from "./chunk-DB4F5EWD.js";
 
 // src/worker.ts
 import { Hono } from "hono";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-drive",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "Store, sort, and share files and folders.",
   "keywords": [
     "drive",
@@ -45,6 +45,10 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
+    "./account": {
+      "types": "./dist/account.d.ts",
+      "import": "./dist/account.js"
+    },
     "./client": {
       "types": "./dist/client.d.ts",
       "import": "./dist/client.js"