hazo_files 2.1.1 → 3.1.0

package/dist/server/index.d.mts

@@ -1,5 +1,7 @@
 import { JobHandler } from 'hazo_jobs';
 import { Readable } from 'node:stream';
+import { HazoAuthError, HazoConfigError, HazoConflictError, HazoNotFoundError, HazoValidationError, HazoExternalError } from 'hazo_core';
+export { HazoError as HazoFilesError } from 'hazo_core';
 import { OAuth2Client } from 'google-auth-library';
 
 /**
@@ -2612,6 +2614,22 @@ interface ProbeResult {
     /** Free-form detail for logging. */
     message?: string;
 }
+/**
+ * A single entry returned by `FileStorageProvider.list()`.
+ *
+ * `path` is the same logical namespace used by `put`/`get` — callers can pass
+ * it directly back to those methods without any transformation.
+ */
+interface FileEntry {
+    /** Logical path within the provider (same namespace as put/get). */
+    path: StoragePath;
+    /** Bare filename or directory name (the last segment of `path`). */
+    name: string;
+    /** Size in bytes. 0 for directories. */
+    size: number;
+    /** True when this entry represents a directory. */
+    isDirectory: boolean;
+}
 /**
  * Storage provider abstraction. Every method MUST be idempotent at the
  * data-content level — re-invoking put with identical body is allowed.
@@ -2626,6 +2644,24 @@ interface FileStorageProvider {
     getSignedUrl(path: StoragePath, opts?: SignedUrlOpts): Promise<string>;
     /** Used by validation cron + onboarding step 2. */
     probe(): Promise<ProbeResult>;
+    /**
+     * List all entries (files and sub-directories) under a logical path prefix.
+     * Results are recursive — all descendants are included.
+     * Returns an empty array when the prefix does not exist.
+     */
+    list(prefix: StoragePath): Promise<FileEntry[]>;
+    /**
+     * Move bytes from `from` to `to`, creating any intermediate directories.
+     * The source is removed on success.
+     * Throws with a message containing "Not found" when `from` does not exist.
+     */
+    move(from: StoragePath, to: StoragePath): Promise<void>;
+    /**
+     * Rename a file or directory.  `to` is the full new logical path.
+     * Implementations may delegate to `move`.
+     * Throws with a message containing "Not found" when `from` does not exist.
+     */
+    rename(from: StoragePath, to: StoragePath): Promise<void>;
 }
 declare class StorageCollisionExhausted extends Error {
     attempts: number;
@@ -2663,6 +2699,10 @@ declare class AppFileServerProvider implements FileStorageProvider {
     /** Verify a token produced by `getSignedUrl`. Used by the `/api/files/serve` route. */
     verifySignedUrl(token: string, path: string): boolean;
     probe(): Promise<ProbeResult>;
+    list(prefix: string): Promise<FileEntry[]>;
+    private walkDir;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
 }
 
 declare class InMemoryProvider implements FileStorageProvider {
@@ -2674,6 +2714,9 @@ declare class InMemoryProvider implements FileStorageProvider {
     exists(path: string): Promise<boolean>;
     getSignedUrl(path: string, _opts?: SignedUrlOpts): Promise<string>;
     probe(): Promise<ProbeResult>;
+    list(prefix: string): Promise<FileEntry[]>;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
     /** Test-only escape hatch — exposes the internal store for assertions. */
     snapshot(): Map<string, Buffer>;
 }
@@ -2703,6 +2746,9 @@ declare class GoogleDriveProvider implements FileStorageProvider {
     delete(path: string): Promise<void>;
     exists(path: string): Promise<boolean>;
     getSignedUrl(path: string, _opts?: SignedUrlOpts): Promise<string>;
+    list(prefix: string): Promise<FileEntry[]>;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
     private resolvePath;
     private findChild;
     private lookupFileId;
@@ -3348,55 +3394,52 @@ declare function saveConfig(config: HazoFilesConfig, configPath?: string): Promi
 
 /**
  * Custom error classes for hazo_files
+ * All errors extend the appropriate hazo_core subclass.
  */
-declare class HazoFilesError extends Error {
-    code: string;
-    details?: Record<string, unknown> | undefined;
-    constructor(message: string, code: string, details?: Record<string, unknown> | undefined);
-}
-declare class FileNotFoundError extends HazoFilesError {
+
+declare class FileNotFoundError extends HazoNotFoundError {
     constructor(path: string);
 }
-declare class DirectoryNotFoundError extends HazoFilesError {
+declare class DirectoryNotFoundError extends HazoNotFoundError {
     constructor(path: string);
 }
-declare class FileExistsError extends HazoFilesError {
+declare class FileExistsError extends HazoConflictError {
     constructor(path: string);
 }
-declare class DirectoryExistsError extends HazoFilesError {
+declare class DirectoryExistsError extends HazoConflictError {
     constructor(path: string);
 }
-declare class DirectoryNotEmptyError extends HazoFilesError {
+declare class DirectoryNotEmptyError extends HazoConflictError {
     constructor(path: string);
 }
-declare class PermissionDeniedError extends HazoFilesError {
+declare class PermissionDeniedError extends HazoAuthError {
     constructor(path: string, operation: string);
 }
-declare class InvalidPathError extends HazoFilesError {
+declare class InvalidPathError extends HazoValidationError {
     constructor(path: string, reason: string);
 }
-declare class FileTooLargeError extends HazoFilesError {
+declare class FileTooLargeError extends HazoValidationError {
     constructor(path: string, size: number, maxSize: number);
 }
-declare class InvalidExtensionError extends HazoFilesError {
+declare class InvalidExtensionError extends HazoValidationError {
     constructor(path: string, extension: string, allowedExtensions: string[]);
 }
-declare class AuthenticationError extends HazoFilesError {
+declare class AuthenticationError extends HazoAuthError {
     constructor(provider: string, message: string);
 }
-declare class ConfigurationError extends HazoFilesError {
+declare class ConfigurationError extends HazoConfigError {
     constructor(message: string);
 }
-declare class OperationError extends HazoFilesError {
+declare class OperationError extends HazoExternalError {
     constructor(operation: string, message: string, details?: Record<string, unknown>);
 }
-declare class QuotaExceededError extends HazoFilesError {
+declare class QuotaExceededError extends HazoValidationError {
     constructor(scopeId: string, byteUsed: number, byteLimit: number, deltaBytes: number);
 }
-declare class SSRFError extends HazoFilesError {
+declare class SSRFError extends HazoValidationError {
     constructor(url: string, reason: string);
 }
-declare class ImportSizeCapError extends HazoFilesError {
+declare class ImportSizeCapError extends HazoValidationError {
     constructor(url: string, capBytes: number);
 }
 
@@ -3771,4 +3814,43 @@ declare function toV2Record(record: FileMetadataRecord): FileMetadataRecordV2;
  */
 declare function buildFileWithStatus(record: FileMetadataRecord): FileWithStatus;
 
-export { ALL_SYSTEM_VARIABLES, type AddExtractionOptions, type AddRefOptions, type AppFileServerOpts, AppFileServerProvider, type AuthCallbacks, AuthenticationError, type CleanupOrphanedOptions, ConfigurationError, type ContentTagConfig, type CreateFolderOptions, type CrudServiceLike, DEFAULT_DATE_FORMATS, type DatabaseSchemaDefinition, type DatabaseTrackingConfig, DirectoryExistsError, DirectoryNotEmptyError, DirectoryNotFoundError, type DownloadOptions, type DrivePathCache, DropboxAuth, type DropboxAuthCallbacks, type DropboxAuthConfig, type DropboxConfig, DropboxModule, type DropboxTokenData, type ExtractionData, type ExtractionOptions, type ExtractionResult, type FileBrowserState, type FileDataStructure, FileExistsError, type FileInfo, type FileItem, FileManager, type FileManagerOptions, type FileMetadataInput, type FileMetadataRecord, type FileMetadataRecordV2, FileMetadataService, type FileMetadataServiceOptions, type FileMetadataUpdate, FileNotFoundError, type FileRef, type FileRefVisibility, type FileStatus, type FileStorageProvider, type FileSystemItem, FileTooLargeError, type FileWithStatus, type FindOrphanedOptions, type FolderItem, type GeneratedNameResult, type GoogleAuthConfig, GoogleDriveAuth, type GoogleDriveConfig, GoogleDriveModule, type GoogleDriveOpts, GoogleDriveProvider, HAZO_FILES_DEFAULT_TABLE_NAME, HAZO_FILES_JOB_TYPES, HAZO_FILES_MIGRATION_V2, HAZO_FILES_MIGRATION_V3, HAZO_FILES_MIGRATION_V4, HAZO_FILES_NAMING_DEFAULT_TABLE_NAME, HAZO_FILES_NAMING_TABLE_SCHEMA, HAZO_FILES_TABLE_SCHEMA, HAZO_FILE_QUOTAS_DEFAULT_TABLE_NAME, HAZO_FILE_QUOTAS_TABLE_SCHEMA, type HazoFileQuotasColumnDefinitions, type HazoFilesColumnDefinitions, type HazoFilesConfig, HazoFilesError, type HazoFilesJobType, type HazoFilesMigrationV2, type HazoFilesMigrationV3, type HazoFilesMigrationV4, type HazoFilesNamingColumnDefinitions, type HazoFilesNamingTableSchema, type HazoFilesServerInstance, type HazoFilesServerOptions, type HazoFilesTableSchema, type HazoLLMInstance, type HazoLogger, ImportSizeCapError, InMemoryProvider, InvalidExtensionError, InvalidPathError, LLMExtractionService, type LLMFactory, type LLMFactoryConfig, type LLMProvider, type ListNamingConventionsOptions, type ListOptions, type LocalStorageConfig, LocalStorageModule, type MetadataLogger, type MigrationExecutor, type MigrationSchemaDefinition, type MoveOptions, type NameGenerationOptions, type NamingConventionInput, type NamingConventionRecord, NamingConventionService, type NamingConventionServiceOptions, type NamingConventionType, type NamingConventionUpdate, type NamingRuleConfiguratorProps, type NamingRuleHistoryEntry, type NamingRuleSchema, type NamingVariable, OperationError, type OperationResult, type ParsedNamingConvention, type PatternSegment, PermissionDeniedError, type ProbeResult, type ProgressCallback, type PurgeJobHandlerOptions, type PurgeOnePayload, type PurgePlanPayload, type PurgePlanResult, type PutOpts, type PutResult, type QuotaCrudServiceLike, QuotaExceededError, QuotaService, type QuotaServiceOptions, type QuotaStatus, type QuotaThresholdEvent, type RemoveExtractionOptions, type RemoveRefsCriteria, type RenameOptions, SSRFError, SYSTEM_COUNTER_VARIABLES, SYSTEM_DATE_VARIABLES, SYSTEM_FILE_VARIABLES, type SignedUrlOpts, StorageCollisionExhausted, type StorageModule, StorageNotConfigured, type StoragePath, type StorageProvider, StorageUnavailable, type TokenData, TrackedFileManager, type TrackedFileManagerFullOptions, type TrackedFileManagerOptions, type TrackedUploadOptions, type TreeNode, type UploadExtractOptions, type UploadExtractResult, UploadExtractService, type UploadOptions, type UploadWithRefOptions, type UseNamingRuleActions, type UseNamingRuleReturn, type UseNamingRuleState, type VariableCategory, addExtractionToFileData, backfillV2Defaults, buildFileWithStatus, clearExtractions, clonePattern, computeFileHash, computeFileHashFromStream, computeFileHashSync, computeFileInfo, createAndInitializeModule, createBasicFileManager, createDropboxAuth, createDropboxModule, createEmptyFileDataStructure, createEmptyNamingRuleSchema, createFileItem, createFileManager, createFileMetadataService, createFileRef, createFolderItem, createGoogleDriveAuth, createGoogleDriveModule, createHazoFilesServer, createInitializedFileManager, createInitializedTrackedFileManager, createLLMExtractionService, createLiteralSegment, createLocalModule, createModule, createNamingConventionService, createPurgeJobHandlers, createQuotaService, createTrackedFileManager, createUploadExtractService, createVariableSegment, deepMerge, errorResult, filterItems, formatBytes, formatCounter, formatDateToken, generateExtractionId, generateId, generatePreviewName, generateRefId, generateSampleConfig, generateSegmentId, getBaseName, getBreadcrumbs, getDirName, getExtension, getExtensionFromMime, getExtractionById, getExtractionCount, getExtractions, getFileCategory, getFileMetadataValues, getMergedData, getMigrationForTable, getMigrationV3ForTable, getMigrationV4ForTable, getMimeType, getNameWithoutExtension, getNamingSchemaForTable, getParentPath, getPathSegments, getRegisteredProviders, getRelativePath, getSchemaForTable, getSystemVariablePreviewValues, hasExtension, hasExtractionStructure, hasFileContentChanged, hashesEqual, hazo_files_generate_file_name, hazo_files_generate_folder_name, isAudio, isChildPath, isCounterVariable, isDateVariable, isDocument, isFile, isFileMetadataVariable, isFolder, isImage, isPreviewable, isProviderRegistered, isText, isVideo, joinPath, loadConfig, loadConfigAsync, migrateToV2, migrateToV3, normalizePath, parseConfig, parseFileData, parseFileRefs, parsePatternString, patternToString, recalculateMergedData, registerModule, removeExtractionById, removeExtractionByIndex, removeRefFromArray, removeRefsByCriteriaFromArray, sanitizeFilename, saveConfig, sortItems, stringifyFileData, stringifyFileRefs, successResult, toV2Record, updateExtractionById, validateExtractionData, validateFileDataStructure, validateNamingRuleSchema, validatePath };
+interface ExternalFileLinkOptions {
+    serve_base?: string;
+    serve_path?: string;
+    metadata?: FileMetadataRecord;
+}
+interface ExternalFileLink {
+    url: string;
+    link_type: 'provider_managed' | 'app_gated';
+    storage_type: StorageProvider | string;
+}
+interface ExternalFileLinkDeps {
+    metadataService: Pick<FileMetadataService, 'findById'>;
+}
+declare function external_file_link(file_id: string, deps: ExternalFileLinkDeps, opts?: ExternalFileLinkOptions): Promise<ExternalFileLink>;
+type ExternalFileLinkResult = ExternalFileLink | {
+    error: string;
+};
+declare function external_file_links(file_ids: string[], deps: ExternalFileLinkDeps, opts?: ExternalFileLinkOptions): Promise<Record<string, ExternalFileLinkResult>>;
+
+interface FileServeAuthContext {
+    request: Request;
+    file_id: string;
+}
+interface FileServeUser {
+    user_id?: string;
+    [k: string]: unknown;
+}
+interface FileServeHandlerOptions {
+    provider: Pick<FileStorageProvider, 'get'>;
+    metadataService: Pick<FileMetadataService, 'findById'>;
+    authenticate?: (ctx: FileServeAuthContext) => Promise<FileServeUser | null>;
+    authorize?: (ctx: FileServeAuthContext & {
+        user: FileServeUser;
+        metadata: FileMetadataRecord;
+    }) => Promise<boolean>;
+    get_file_id?: (request: Request) => string | null;
+}
+declare function createFileServeHandler(opts: FileServeHandlerOptions): (request: Request) => Promise<Response>;
+
+export { ALL_SYSTEM_VARIABLES, type AddExtractionOptions, type AddRefOptions, type AppFileServerOpts, AppFileServerProvider, type AuthCallbacks, AuthenticationError, type CleanupOrphanedOptions, ConfigurationError, type ContentTagConfig, type CreateFolderOptions, type CrudServiceLike, DEFAULT_DATE_FORMATS, type DatabaseSchemaDefinition, type DatabaseTrackingConfig, DirectoryExistsError, DirectoryNotEmptyError, DirectoryNotFoundError, type DownloadOptions, type DrivePathCache, DropboxAuth, type DropboxAuthCallbacks, type DropboxAuthConfig, type DropboxConfig, DropboxModule, type DropboxTokenData, type ExternalFileLink, type ExternalFileLinkDeps, type ExternalFileLinkOptions, type ExternalFileLinkResult, type ExtractionData, type ExtractionOptions, type ExtractionResult, type FileBrowserState, type FileDataStructure, type FileEntry, FileExistsError, type FileInfo, type FileItem, FileManager, type FileManagerOptions, type FileMetadataInput, type FileMetadataRecord, type FileMetadataRecordV2, FileMetadataService, type FileMetadataServiceOptions, type FileMetadataUpdate, FileNotFoundError, type FileRef, type FileRefVisibility, type FileServeAuthContext, type FileServeHandlerOptions, type FileServeUser, type FileStatus, type FileStorageProvider, type FileSystemItem, FileTooLargeError, type FileWithStatus, type FindOrphanedOptions, type FolderItem, type GeneratedNameResult, type GoogleAuthConfig, GoogleDriveAuth, type GoogleDriveConfig, GoogleDriveModule, type GoogleDriveOpts, GoogleDriveProvider, HAZO_FILES_DEFAULT_TABLE_NAME, HAZO_FILES_JOB_TYPES, HAZO_FILES_MIGRATION_V2, HAZO_FILES_MIGRATION_V3, HAZO_FILES_MIGRATION_V4, HAZO_FILES_NAMING_DEFAULT_TABLE_NAME, HAZO_FILES_NAMING_TABLE_SCHEMA, HAZO_FILES_TABLE_SCHEMA, HAZO_FILE_QUOTAS_DEFAULT_TABLE_NAME, HAZO_FILE_QUOTAS_TABLE_SCHEMA, type HazoFileQuotasColumnDefinitions, type HazoFilesColumnDefinitions, type HazoFilesConfig, type HazoFilesJobType, type HazoFilesMigrationV2, type HazoFilesMigrationV3, type HazoFilesMigrationV4, type HazoFilesNamingColumnDefinitions, type HazoFilesNamingTableSchema, type HazoFilesServerInstance, type HazoFilesServerOptions, type HazoFilesTableSchema, type HazoLLMInstance, type HazoLogger, ImportSizeCapError, InMemoryProvider, InvalidExtensionError, InvalidPathError, LLMExtractionService, type LLMFactory, type LLMFactoryConfig, type LLMProvider, type ListNamingConventionsOptions, type ListOptions, type LocalStorageConfig, LocalStorageModule, type MetadataLogger, type MigrationExecutor, type MigrationSchemaDefinition, type MoveOptions, type NameGenerationOptions, type NamingConventionInput, type NamingConventionRecord, NamingConventionService, type NamingConventionServiceOptions, type NamingConventionType, type NamingConventionUpdate, type NamingRuleConfiguratorProps, type NamingRuleHistoryEntry, type NamingRuleSchema, type NamingVariable, OperationError, type OperationResult, type ParsedNamingConvention, type PatternSegment, PermissionDeniedError, type ProbeResult, type ProgressCallback, type PurgeJobHandlerOptions, type PurgeOnePayload, type PurgePlanPayload, type PurgePlanResult, type PutOpts, type PutResult, type QuotaCrudServiceLike, QuotaExceededError, QuotaService, type QuotaServiceOptions, type QuotaStatus, type QuotaThresholdEvent, type RemoveExtractionOptions, type RemoveRefsCriteria, type RenameOptions, SSRFError, SYSTEM_COUNTER_VARIABLES, SYSTEM_DATE_VARIABLES, SYSTEM_FILE_VARIABLES, type SignedUrlOpts, StorageCollisionExhausted, type StorageModule, StorageNotConfigured, type StoragePath, type StorageProvider, StorageUnavailable, type TokenData, TrackedFileManager, type TrackedFileManagerFullOptions, type TrackedFileManagerOptions, type TrackedUploadOptions, type TreeNode, type UploadExtractOptions, type UploadExtractResult, UploadExtractService, type UploadOptions, type UploadWithRefOptions, type UseNamingRuleActions, type UseNamingRuleReturn, type UseNamingRuleState, type VariableCategory, addExtractionToFileData, backfillV2Defaults, buildFileWithStatus, clearExtractions, clonePattern, computeFileHash, computeFileHashFromStream, computeFileHashSync, computeFileInfo, createAndInitializeModule, createBasicFileManager, createDropboxAuth, createDropboxModule, createEmptyFileDataStructure, createEmptyNamingRuleSchema, createFileItem, createFileManager, createFileMetadataService, createFileRef, createFileServeHandler, createFolderItem, createGoogleDriveAuth, createGoogleDriveModule, createHazoFilesServer, createInitializedFileManager, createInitializedTrackedFileManager, createLLMExtractionService, createLiteralSegment, createLocalModule, createModule, createNamingConventionService, createPurgeJobHandlers, createQuotaService, createTrackedFileManager, createUploadExtractService, createVariableSegment, deepMerge, errorResult, external_file_link, external_file_links, filterItems, formatBytes, formatCounter, formatDateToken, generateExtractionId, generateId, generatePreviewName, generateRefId, generateSampleConfig, generateSegmentId, getBaseName, getBreadcrumbs, getDirName, getExtension, getExtensionFromMime, getExtractionById, getExtractionCount, getExtractions, getFileCategory, getFileMetadataValues, getMergedData, getMigrationForTable, getMigrationV3ForTable, getMigrationV4ForTable, getMimeType, getNameWithoutExtension, getNamingSchemaForTable, getParentPath, getPathSegments, getRegisteredProviders, getRelativePath, getSchemaForTable, getSystemVariablePreviewValues, hasExtension, hasExtractionStructure, hasFileContentChanged, hashesEqual, hazo_files_generate_file_name, hazo_files_generate_folder_name, isAudio, isChildPath, isCounterVariable, isDateVariable, isDocument, isFile, isFileMetadataVariable, isFolder, isImage, isPreviewable, isProviderRegistered, isText, isVideo, joinPath, loadConfig, loadConfigAsync, migrateToV2, migrateToV3, normalizePath, parseConfig, parseFileData, parseFileRefs, parsePatternString, patternToString, recalculateMergedData, registerModule, removeExtractionById, removeExtractionByIndex, removeRefFromArray, removeRefsByCriteriaFromArray, sanitizeFilename, saveConfig, sortItems, stringifyFileData, stringifyFileRefs, successResult, toV2Record, updateExtractionById, validateExtractionData, validateFileDataStructure, validateNamingRuleSchema, validatePath };

package/dist/server/index.d.ts

@@ -1,5 +1,7 @@
 import { JobHandler } from 'hazo_jobs';
 import { Readable } from 'node:stream';
+import { HazoAuthError, HazoConfigError, HazoConflictError, HazoNotFoundError, HazoValidationError, HazoExternalError } from 'hazo_core';
+export { HazoError as HazoFilesError } from 'hazo_core';
 import { OAuth2Client } from 'google-auth-library';
 
 /**
@@ -2612,6 +2614,22 @@ interface ProbeResult {
     /** Free-form detail for logging. */
     message?: string;
 }
+/**
+ * A single entry returned by `FileStorageProvider.list()`.
+ *
+ * `path` is the same logical namespace used by `put`/`get` — callers can pass
+ * it directly back to those methods without any transformation.
+ */
+interface FileEntry {
+    /** Logical path within the provider (same namespace as put/get). */
+    path: StoragePath;
+    /** Bare filename or directory name (the last segment of `path`). */
+    name: string;
+    /** Size in bytes. 0 for directories. */
+    size: number;
+    /** True when this entry represents a directory. */
+    isDirectory: boolean;
+}
 /**
  * Storage provider abstraction. Every method MUST be idempotent at the
  * data-content level — re-invoking put with identical body is allowed.
@@ -2626,6 +2644,24 @@ interface FileStorageProvider {
     getSignedUrl(path: StoragePath, opts?: SignedUrlOpts): Promise<string>;
     /** Used by validation cron + onboarding step 2. */
     probe(): Promise<ProbeResult>;
+    /**
+     * List all entries (files and sub-directories) under a logical path prefix.
+     * Results are recursive — all descendants are included.
+     * Returns an empty array when the prefix does not exist.
+     */
+    list(prefix: StoragePath): Promise<FileEntry[]>;
+    /**
+     * Move bytes from `from` to `to`, creating any intermediate directories.
+     * The source is removed on success.
+     * Throws with a message containing "Not found" when `from` does not exist.
+     */
+    move(from: StoragePath, to: StoragePath): Promise<void>;
+    /**
+     * Rename a file or directory.  `to` is the full new logical path.
+     * Implementations may delegate to `move`.
+     * Throws with a message containing "Not found" when `from` does not exist.
+     */
+    rename(from: StoragePath, to: StoragePath): Promise<void>;
 }
 declare class StorageCollisionExhausted extends Error {
     attempts: number;
@@ -2663,6 +2699,10 @@ declare class AppFileServerProvider implements FileStorageProvider {
     /** Verify a token produced by `getSignedUrl`. Used by the `/api/files/serve` route. */
     verifySignedUrl(token: string, path: string): boolean;
     probe(): Promise<ProbeResult>;
+    list(prefix: string): Promise<FileEntry[]>;
+    private walkDir;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
 }
 
 declare class InMemoryProvider implements FileStorageProvider {
@@ -2674,6 +2714,9 @@ declare class InMemoryProvider implements FileStorageProvider {
     exists(path: string): Promise<boolean>;
     getSignedUrl(path: string, _opts?: SignedUrlOpts): Promise<string>;
     probe(): Promise<ProbeResult>;
+    list(prefix: string): Promise<FileEntry[]>;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
     /** Test-only escape hatch — exposes the internal store for assertions. */
     snapshot(): Map<string, Buffer>;
 }
@@ -2703,6 +2746,9 @@ declare class GoogleDriveProvider implements FileStorageProvider {
     delete(path: string): Promise<void>;
     exists(path: string): Promise<boolean>;
     getSignedUrl(path: string, _opts?: SignedUrlOpts): Promise<string>;
+    list(prefix: string): Promise<FileEntry[]>;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
     private resolvePath;
     private findChild;
     private lookupFileId;
@@ -3348,55 +3394,52 @@ declare function saveConfig(config: HazoFilesConfig, configPath?: string): Promi
 
 /**
  * Custom error classes for hazo_files
+ * All errors extend the appropriate hazo_core subclass.
  */
-declare class HazoFilesError extends Error {
-    code: string;
-    details?: Record<string, unknown> | undefined;
-    constructor(message: string, code: string, details?: Record<string, unknown> | undefined);
-}
-declare class FileNotFoundError extends HazoFilesError {
+
+declare class FileNotFoundError extends HazoNotFoundError {
     constructor(path: string);
 }
-declare class DirectoryNotFoundError extends HazoFilesError {
+declare class DirectoryNotFoundError extends HazoNotFoundError {
     constructor(path: string);
 }
-declare class FileExistsError extends HazoFilesError {
+declare class FileExistsError extends HazoConflictError {
     constructor(path: string);
 }
-declare class DirectoryExistsError extends HazoFilesError {
+declare class DirectoryExistsError extends HazoConflictError {
     constructor(path: string);
 }
-declare class DirectoryNotEmptyError extends HazoFilesError {
+declare class DirectoryNotEmptyError extends HazoConflictError {
     constructor(path: string);
 }
-declare class PermissionDeniedError extends HazoFilesError {
+declare class PermissionDeniedError extends HazoAuthError {
     constructor(path: string, operation: string);
 }
-declare class InvalidPathError extends HazoFilesError {
+declare class InvalidPathError extends HazoValidationError {
     constructor(path: string, reason: string);
 }
-declare class FileTooLargeError extends HazoFilesError {
+declare class FileTooLargeError extends HazoValidationError {
     constructor(path: string, size: number, maxSize: number);
 }
-declare class InvalidExtensionError extends HazoFilesError {
+declare class InvalidExtensionError extends HazoValidationError {
     constructor(path: string, extension: string, allowedExtensions: string[]);
 }
-declare class AuthenticationError extends HazoFilesError {
+declare class AuthenticationError extends HazoAuthError {
     constructor(provider: string, message: string);
 }
-declare class ConfigurationError extends HazoFilesError {
+declare class ConfigurationError extends HazoConfigError {
     constructor(message: string);
 }
-declare class OperationError extends HazoFilesError {
+declare class OperationError extends HazoExternalError {
     constructor(operation: string, message: string, details?: Record<string, unknown>);
 }
-declare class QuotaExceededError extends HazoFilesError {
+declare class QuotaExceededError extends HazoValidationError {
     constructor(scopeId: string, byteUsed: number, byteLimit: number, deltaBytes: number);
 }
-declare class SSRFError extends HazoFilesError {
+declare class SSRFError extends HazoValidationError {
     constructor(url: string, reason: string);
 }
-declare class ImportSizeCapError extends HazoFilesError {
+declare class ImportSizeCapError extends HazoValidationError {
     constructor(url: string, capBytes: number);
 }
 
@@ -3771,4 +3814,43 @@ declare function toV2Record(record: FileMetadataRecord): FileMetadataRecordV2;
  */
 declare function buildFileWithStatus(record: FileMetadataRecord): FileWithStatus;
 
-export { ALL_SYSTEM_VARIABLES, type AddExtractionOptions, type AddRefOptions, type AppFileServerOpts, AppFileServerProvider, type AuthCallbacks, AuthenticationError, type CleanupOrphanedOptions, ConfigurationError, type ContentTagConfig, type CreateFolderOptions, type CrudServiceLike, DEFAULT_DATE_FORMATS, type DatabaseSchemaDefinition, type DatabaseTrackingConfig, DirectoryExistsError, DirectoryNotEmptyError, DirectoryNotFoundError, type DownloadOptions, type DrivePathCache, DropboxAuth, type DropboxAuthCallbacks, type DropboxAuthConfig, type DropboxConfig, DropboxModule, type DropboxTokenData, type ExtractionData, type ExtractionOptions, type ExtractionResult, type FileBrowserState, type FileDataStructure, FileExistsError, type FileInfo, type FileItem, FileManager, type FileManagerOptions, type FileMetadataInput, type FileMetadataRecord, type FileMetadataRecordV2, FileMetadataService, type FileMetadataServiceOptions, type FileMetadataUpdate, FileNotFoundError, type FileRef, type FileRefVisibility, type FileStatus, type FileStorageProvider, type FileSystemItem, FileTooLargeError, type FileWithStatus, type FindOrphanedOptions, type FolderItem, type GeneratedNameResult, type GoogleAuthConfig, GoogleDriveAuth, type GoogleDriveConfig, GoogleDriveModule, type GoogleDriveOpts, GoogleDriveProvider, HAZO_FILES_DEFAULT_TABLE_NAME, HAZO_FILES_JOB_TYPES, HAZO_FILES_MIGRATION_V2, HAZO_FILES_MIGRATION_V3, HAZO_FILES_MIGRATION_V4, HAZO_FILES_NAMING_DEFAULT_TABLE_NAME, HAZO_FILES_NAMING_TABLE_SCHEMA, HAZO_FILES_TABLE_SCHEMA, HAZO_FILE_QUOTAS_DEFAULT_TABLE_NAME, HAZO_FILE_QUOTAS_TABLE_SCHEMA, type HazoFileQuotasColumnDefinitions, type HazoFilesColumnDefinitions, type HazoFilesConfig, HazoFilesError, type HazoFilesJobType, type HazoFilesMigrationV2, type HazoFilesMigrationV3, type HazoFilesMigrationV4, type HazoFilesNamingColumnDefinitions, type HazoFilesNamingTableSchema, type HazoFilesServerInstance, type HazoFilesServerOptions, type HazoFilesTableSchema, type HazoLLMInstance, type HazoLogger, ImportSizeCapError, InMemoryProvider, InvalidExtensionError, InvalidPathError, LLMExtractionService, type LLMFactory, type LLMFactoryConfig, type LLMProvider, type ListNamingConventionsOptions, type ListOptions, type LocalStorageConfig, LocalStorageModule, type MetadataLogger, type MigrationExecutor, type MigrationSchemaDefinition, type MoveOptions, type NameGenerationOptions, type NamingConventionInput, type NamingConventionRecord, NamingConventionService, type NamingConventionServiceOptions, type NamingConventionType, type NamingConventionUpdate, type NamingRuleConfiguratorProps, type NamingRuleHistoryEntry, type NamingRuleSchema, type NamingVariable, OperationError, type OperationResult, type ParsedNamingConvention, type PatternSegment, PermissionDeniedError, type ProbeResult, type ProgressCallback, type PurgeJobHandlerOptions, type PurgeOnePayload, type PurgePlanPayload, type PurgePlanResult, type PutOpts, type PutResult, type QuotaCrudServiceLike, QuotaExceededError, QuotaService, type QuotaServiceOptions, type QuotaStatus, type QuotaThresholdEvent, type RemoveExtractionOptions, type RemoveRefsCriteria, type RenameOptions, SSRFError, SYSTEM_COUNTER_VARIABLES, SYSTEM_DATE_VARIABLES, SYSTEM_FILE_VARIABLES, type SignedUrlOpts, StorageCollisionExhausted, type StorageModule, StorageNotConfigured, type StoragePath, type StorageProvider, StorageUnavailable, type TokenData, TrackedFileManager, type TrackedFileManagerFullOptions, type TrackedFileManagerOptions, type TrackedUploadOptions, type TreeNode, type UploadExtractOptions, type UploadExtractResult, UploadExtractService, type UploadOptions, type UploadWithRefOptions, type UseNamingRuleActions, type UseNamingRuleReturn, type UseNamingRuleState, type VariableCategory, addExtractionToFileData, backfillV2Defaults, buildFileWithStatus, clearExtractions, clonePattern, computeFileHash, computeFileHashFromStream, computeFileHashSync, computeFileInfo, createAndInitializeModule, createBasicFileManager, createDropboxAuth, createDropboxModule, createEmptyFileDataStructure, createEmptyNamingRuleSchema, createFileItem, createFileManager, createFileMetadataService, createFileRef, createFolderItem, createGoogleDriveAuth, createGoogleDriveModule, createHazoFilesServer, createInitializedFileManager, createInitializedTrackedFileManager, createLLMExtractionService, createLiteralSegment, createLocalModule, createModule, createNamingConventionService, createPurgeJobHandlers, createQuotaService, createTrackedFileManager, createUploadExtractService, createVariableSegment, deepMerge, errorResult, filterItems, formatBytes, formatCounter, formatDateToken, generateExtractionId, generateId, generatePreviewName, generateRefId, generateSampleConfig, generateSegmentId, getBaseName, getBreadcrumbs, getDirName, getExtension, getExtensionFromMime, getExtractionById, getExtractionCount, getExtractions, getFileCategory, getFileMetadataValues, getMergedData, getMigrationForTable, getMigrationV3ForTable, getMigrationV4ForTable, getMimeType, getNameWithoutExtension, getNamingSchemaForTable, getParentPath, getPathSegments, getRegisteredProviders, getRelativePath, getSchemaForTable, getSystemVariablePreviewValues, hasExtension, hasExtractionStructure, hasFileContentChanged, hashesEqual, hazo_files_generate_file_name, hazo_files_generate_folder_name, isAudio, isChildPath, isCounterVariable, isDateVariable, isDocument, isFile, isFileMetadataVariable, isFolder, isImage, isPreviewable, isProviderRegistered, isText, isVideo, joinPath, loadConfig, loadConfigAsync, migrateToV2, migrateToV3, normalizePath, parseConfig, parseFileData, parseFileRefs, parsePatternString, patternToString, recalculateMergedData, registerModule, removeExtractionById, removeExtractionByIndex, removeRefFromArray, removeRefsByCriteriaFromArray, sanitizeFilename, saveConfig, sortItems, stringifyFileData, stringifyFileRefs, successResult, toV2Record, updateExtractionById, validateExtractionData, validateFileDataStructure, validateNamingRuleSchema, validatePath };
+interface ExternalFileLinkOptions {
+    serve_base?: string;
+    serve_path?: string;
+    metadata?: FileMetadataRecord;
+}
+interface ExternalFileLink {
+    url: string;
+    link_type: 'provider_managed' | 'app_gated';
+    storage_type: StorageProvider | string;
+}
+interface ExternalFileLinkDeps {
+    metadataService: Pick<FileMetadataService, 'findById'>;
+}
+declare function external_file_link(file_id: string, deps: ExternalFileLinkDeps, opts?: ExternalFileLinkOptions): Promise<ExternalFileLink>;
+type ExternalFileLinkResult = ExternalFileLink | {
+    error: string;
+};
+declare function external_file_links(file_ids: string[], deps: ExternalFileLinkDeps, opts?: ExternalFileLinkOptions): Promise<Record<string, ExternalFileLinkResult>>;
+
+interface FileServeAuthContext {
+    request: Request;
+    file_id: string;
+}
+interface FileServeUser {
+    user_id?: string;
+    [k: string]: unknown;
+}
+interface FileServeHandlerOptions {
+    provider: Pick<FileStorageProvider, 'get'>;
+    metadataService: Pick<FileMetadataService, 'findById'>;
+    authenticate?: (ctx: FileServeAuthContext) => Promise<FileServeUser | null>;
+    authorize?: (ctx: FileServeAuthContext & {
+        user: FileServeUser;
+        metadata: FileMetadataRecord;
+    }) => Promise<boolean>;
+    get_file_id?: (request: Request) => string | null;
+}
+declare function createFileServeHandler(opts: FileServeHandlerOptions): (request: Request) => Promise<Response>;
+
+export { ALL_SYSTEM_VARIABLES, type AddExtractionOptions, type AddRefOptions, type AppFileServerOpts, AppFileServerProvider, type AuthCallbacks, AuthenticationError, type CleanupOrphanedOptions, ConfigurationError, type ContentTagConfig, type CreateFolderOptions, type CrudServiceLike, DEFAULT_DATE_FORMATS, type DatabaseSchemaDefinition, type DatabaseTrackingConfig, DirectoryExistsError, DirectoryNotEmptyError, DirectoryNotFoundError, type DownloadOptions, type DrivePathCache, DropboxAuth, type DropboxAuthCallbacks, type DropboxAuthConfig, type DropboxConfig, DropboxModule, type DropboxTokenData, type ExternalFileLink, type ExternalFileLinkDeps, type ExternalFileLinkOptions, type ExternalFileLinkResult, type ExtractionData, type ExtractionOptions, type ExtractionResult, type FileBrowserState, type FileDataStructure, type FileEntry, FileExistsError, type FileInfo, type FileItem, FileManager, type FileManagerOptions, type FileMetadataInput, type FileMetadataRecord, type FileMetadataRecordV2, FileMetadataService, type FileMetadataServiceOptions, type FileMetadataUpdate, FileNotFoundError, type FileRef, type FileRefVisibility, type FileServeAuthContext, type FileServeHandlerOptions, type FileServeUser, type FileStatus, type FileStorageProvider, type FileSystemItem, FileTooLargeError, type FileWithStatus, type FindOrphanedOptions, type FolderItem, type GeneratedNameResult, type GoogleAuthConfig, GoogleDriveAuth, type GoogleDriveConfig, GoogleDriveModule, type GoogleDriveOpts, GoogleDriveProvider, HAZO_FILES_DEFAULT_TABLE_NAME, HAZO_FILES_JOB_TYPES, HAZO_FILES_MIGRATION_V2, HAZO_FILES_MIGRATION_V3, HAZO_FILES_MIGRATION_V4, HAZO_FILES_NAMING_DEFAULT_TABLE_NAME, HAZO_FILES_NAMING_TABLE_SCHEMA, HAZO_FILES_TABLE_SCHEMA, HAZO_FILE_QUOTAS_DEFAULT_TABLE_NAME, HAZO_FILE_QUOTAS_TABLE_SCHEMA, type HazoFileQuotasColumnDefinitions, type HazoFilesColumnDefinitions, type HazoFilesConfig, type HazoFilesJobType, type HazoFilesMigrationV2, type HazoFilesMigrationV3, type HazoFilesMigrationV4, type HazoFilesNamingColumnDefinitions, type HazoFilesNamingTableSchema, type HazoFilesServerInstance, type HazoFilesServerOptions, type HazoFilesTableSchema, type HazoLLMInstance, type HazoLogger, ImportSizeCapError, InMemoryProvider, InvalidExtensionError, InvalidPathError, LLMExtractionService, type LLMFactory, type LLMFactoryConfig, type LLMProvider, type ListNamingConventionsOptions, type ListOptions, type LocalStorageConfig, LocalStorageModule, type MetadataLogger, type MigrationExecutor, type MigrationSchemaDefinition, type MoveOptions, type NameGenerationOptions, type NamingConventionInput, type NamingConventionRecord, NamingConventionService, type NamingConventionServiceOptions, type NamingConventionType, type NamingConventionUpdate, type NamingRuleConfiguratorProps, type NamingRuleHistoryEntry, type NamingRuleSchema, type NamingVariable, OperationError, type OperationResult, type ParsedNamingConvention, type PatternSegment, PermissionDeniedError, type ProbeResult, type ProgressCallback, type PurgeJobHandlerOptions, type PurgeOnePayload, type PurgePlanPayload, type PurgePlanResult, type PutOpts, type PutResult, type QuotaCrudServiceLike, QuotaExceededError, QuotaService, type QuotaServiceOptions, type QuotaStatus, type QuotaThresholdEvent, type RemoveExtractionOptions, type RemoveRefsCriteria, type RenameOptions, SSRFError, SYSTEM_COUNTER_VARIABLES, SYSTEM_DATE_VARIABLES, SYSTEM_FILE_VARIABLES, type SignedUrlOpts, StorageCollisionExhausted, type StorageModule, StorageNotConfigured, type StoragePath, type StorageProvider, StorageUnavailable, type TokenData, TrackedFileManager, type TrackedFileManagerFullOptions, type TrackedFileManagerOptions, type TrackedUploadOptions, type TreeNode, type UploadExtractOptions, type UploadExtractResult, UploadExtractService, type UploadOptions, type UploadWithRefOptions, type UseNamingRuleActions, type UseNamingRuleReturn, type UseNamingRuleState, type VariableCategory, addExtractionToFileData, backfillV2Defaults, buildFileWithStatus, clearExtractions, clonePattern, computeFileHash, computeFileHashFromStream, computeFileHashSync, computeFileInfo, createAndInitializeModule, createBasicFileManager, createDropboxAuth, createDropboxModule, createEmptyFileDataStructure, createEmptyNamingRuleSchema, createFileItem, createFileManager, createFileMetadataService, createFileRef, createFileServeHandler, createFolderItem, createGoogleDriveAuth, createGoogleDriveModule, createHazoFilesServer, createInitializedFileManager, createInitializedTrackedFileManager, createLLMExtractionService, createLiteralSegment, createLocalModule, createModule, createNamingConventionService, createPurgeJobHandlers, createQuotaService, createTrackedFileManager, createUploadExtractService, createVariableSegment, deepMerge, errorResult, external_file_link, external_file_links, filterItems, formatBytes, formatCounter, formatDateToken, generateExtractionId, generateId, generatePreviewName, generateRefId, generateSampleConfig, generateSegmentId, getBaseName, getBreadcrumbs, getDirName, getExtension, getExtensionFromMime, getExtractionById, getExtractionCount, getExtractions, getFileCategory, getFileMetadataValues, getMergedData, getMigrationForTable, getMigrationV3ForTable, getMigrationV4ForTable, getMimeType, getNameWithoutExtension, getNamingSchemaForTable, getParentPath, getPathSegments, getRegisteredProviders, getRelativePath, getSchemaForTable, getSystemVariablePreviewValues, hasExtension, hasExtractionStructure, hasFileContentChanged, hashesEqual, hazo_files_generate_file_name, hazo_files_generate_folder_name, isAudio, isChildPath, isCounterVariable, isDateVariable, isDocument, isFile, isFileMetadataVariable, isFolder, isImage, isPreviewable, isProviderRegistered, isText, isVideo, joinPath, loadConfig, loadConfigAsync, migrateToV2, migrateToV3, normalizePath, parseConfig, parseFileData, parseFileRefs, parsePatternString, patternToString, recalculateMergedData, registerModule, removeExtractionById, removeExtractionByIndex, removeRefFromArray, removeRefsByCriteriaFromArray, sanitizeFilename, saveConfig, sortItems, stringifyFileData, stringifyFileRefs, successResult, toV2Record, updateExtractionById, validateExtractionData, validateFileDataStructure, validateNamingRuleSchema, validatePath };