hazo_files 3.0.0 → 3.1.0

package/dist/server/index.d.ts

@@ -2614,6 +2614,22 @@ interface ProbeResult {
     /** Free-form detail for logging. */
     message?: string;
 }
+/**
+ * A single entry returned by `FileStorageProvider.list()`.
+ *
+ * `path` is the same logical namespace used by `put`/`get` — callers can pass
+ * it directly back to those methods without any transformation.
+ */
+interface FileEntry {
+    /** Logical path within the provider (same namespace as put/get). */
+    path: StoragePath;
+    /** Bare filename or directory name (the last segment of `path`). */
+    name: string;
+    /** Size in bytes. 0 for directories. */
+    size: number;
+    /** True when this entry represents a directory. */
+    isDirectory: boolean;
+}
 /**
  * Storage provider abstraction. Every method MUST be idempotent at the
  * data-content level — re-invoking put with identical body is allowed.
@@ -2628,6 +2644,24 @@ interface FileStorageProvider {
     getSignedUrl(path: StoragePath, opts?: SignedUrlOpts): Promise<string>;
     /** Used by validation cron + onboarding step 2. */
     probe(): Promise<ProbeResult>;
+    /**
+     * List all entries (files and sub-directories) under a logical path prefix.
+     * Results are recursive — all descendants are included.
+     * Returns an empty array when the prefix does not exist.
+     */
+    list(prefix: StoragePath): Promise<FileEntry[]>;
+    /**
+     * Move bytes from `from` to `to`, creating any intermediate directories.
+     * The source is removed on success.
+     * Throws with a message containing "Not found" when `from` does not exist.
+     */
+    move(from: StoragePath, to: StoragePath): Promise<void>;
+    /**
+     * Rename a file or directory.  `to` is the full new logical path.
+     * Implementations may delegate to `move`.
+     * Throws with a message containing "Not found" when `from` does not exist.
+     */
+    rename(from: StoragePath, to: StoragePath): Promise<void>;
 }
 declare class StorageCollisionExhausted extends Error {
     attempts: number;
@@ -2665,6 +2699,10 @@ declare class AppFileServerProvider implements FileStorageProvider {
     /** Verify a token produced by `getSignedUrl`. Used by the `/api/files/serve` route. */
     verifySignedUrl(token: string, path: string): boolean;
     probe(): Promise<ProbeResult>;
+    list(prefix: string): Promise<FileEntry[]>;
+    private walkDir;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
 }
 
 declare class InMemoryProvider implements FileStorageProvider {
@@ -2676,6 +2714,9 @@ declare class InMemoryProvider implements FileStorageProvider {
     exists(path: string): Promise<boolean>;
     getSignedUrl(path: string, _opts?: SignedUrlOpts): Promise<string>;
     probe(): Promise<ProbeResult>;
+    list(prefix: string): Promise<FileEntry[]>;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
     /** Test-only escape hatch — exposes the internal store for assertions. */
     snapshot(): Map<string, Buffer>;
 }
@@ -2705,6 +2746,9 @@ declare class GoogleDriveProvider implements FileStorageProvider {
     delete(path: string): Promise<void>;
     exists(path: string): Promise<boolean>;
     getSignedUrl(path: string, _opts?: SignedUrlOpts): Promise<string>;
+    list(prefix: string): Promise<FileEntry[]>;
+    move(from: string, to: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
     private resolvePath;
     private findChild;
     private lookupFileId;
@@ -3770,4 +3814,43 @@ declare function toV2Record(record: FileMetadataRecord): FileMetadataRecordV2;
  */
 declare function buildFileWithStatus(record: FileMetadataRecord): FileWithStatus;
 
-export { ALL_SYSTEM_VARIABLES, type AddExtractionOptions, type AddRefOptions, type AppFileServerOpts, AppFileServerProvider, type AuthCallbacks, AuthenticationError, type CleanupOrphanedOptions, ConfigurationError, type ContentTagConfig, type CreateFolderOptions, type CrudServiceLike, DEFAULT_DATE_FORMATS, type DatabaseSchemaDefinition, type DatabaseTrackingConfig, DirectoryExistsError, DirectoryNotEmptyError, DirectoryNotFoundError, type DownloadOptions, type DrivePathCache, DropboxAuth, type DropboxAuthCallbacks, type DropboxAuthConfig, type DropboxConfig, DropboxModule, type DropboxTokenData, type ExtractionData, type ExtractionOptions, type ExtractionResult, type FileBrowserState, type FileDataStructure, FileExistsError, type FileInfo, type FileItem, FileManager, type FileManagerOptions, type FileMetadataInput, type FileMetadataRecord, type FileMetadataRecordV2, FileMetadataService, type FileMetadataServiceOptions, type FileMetadataUpdate, FileNotFoundError, type FileRef, type FileRefVisibility, type FileStatus, type FileStorageProvider, type FileSystemItem, FileTooLargeError, type FileWithStatus, type FindOrphanedOptions, type FolderItem, type GeneratedNameResult, type GoogleAuthConfig, GoogleDriveAuth, type GoogleDriveConfig, GoogleDriveModule, type GoogleDriveOpts, GoogleDriveProvider, HAZO_FILES_DEFAULT_TABLE_NAME, HAZO_FILES_JOB_TYPES, HAZO_FILES_MIGRATION_V2, HAZO_FILES_MIGRATION_V3, HAZO_FILES_MIGRATION_V4, HAZO_FILES_NAMING_DEFAULT_TABLE_NAME, HAZO_FILES_NAMING_TABLE_SCHEMA, HAZO_FILES_TABLE_SCHEMA, HAZO_FILE_QUOTAS_DEFAULT_TABLE_NAME, HAZO_FILE_QUOTAS_TABLE_SCHEMA, type HazoFileQuotasColumnDefinitions, type HazoFilesColumnDefinitions, type HazoFilesConfig, type HazoFilesJobType, type HazoFilesMigrationV2, type HazoFilesMigrationV3, type HazoFilesMigrationV4, type HazoFilesNamingColumnDefinitions, type HazoFilesNamingTableSchema, type HazoFilesServerInstance, type HazoFilesServerOptions, type HazoFilesTableSchema, type HazoLLMInstance, type HazoLogger, ImportSizeCapError, InMemoryProvider, InvalidExtensionError, InvalidPathError, LLMExtractionService, type LLMFactory, type LLMFactoryConfig, type LLMProvider, type ListNamingConventionsOptions, type ListOptions, type LocalStorageConfig, LocalStorageModule, type MetadataLogger, type MigrationExecutor, type MigrationSchemaDefinition, type MoveOptions, type NameGenerationOptions, type NamingConventionInput, type NamingConventionRecord, NamingConventionService, type NamingConventionServiceOptions, type NamingConventionType, type NamingConventionUpdate, type NamingRuleConfiguratorProps, type NamingRuleHistoryEntry, type NamingRuleSchema, type NamingVariable, OperationError, type OperationResult, type ParsedNamingConvention, type PatternSegment, PermissionDeniedError, type ProbeResult, type ProgressCallback, type PurgeJobHandlerOptions, type PurgeOnePayload, type PurgePlanPayload, type PurgePlanResult, type PutOpts, type PutResult, type QuotaCrudServiceLike, QuotaExceededError, QuotaService, type QuotaServiceOptions, type QuotaStatus, type QuotaThresholdEvent, type RemoveExtractionOptions, type RemoveRefsCriteria, type RenameOptions, SSRFError, SYSTEM_COUNTER_VARIABLES, SYSTEM_DATE_VARIABLES, SYSTEM_FILE_VARIABLES, type SignedUrlOpts, StorageCollisionExhausted, type StorageModule, StorageNotConfigured, type StoragePath, type StorageProvider, StorageUnavailable, type TokenData, TrackedFileManager, type TrackedFileManagerFullOptions, type TrackedFileManagerOptions, type TrackedUploadOptions, type TreeNode, type UploadExtractOptions, type UploadExtractResult, UploadExtractService, type UploadOptions, type UploadWithRefOptions, type UseNamingRuleActions, type UseNamingRuleReturn, type UseNamingRuleState, type VariableCategory, addExtractionToFileData, backfillV2Defaults, buildFileWithStatus, clearExtractions, clonePattern, computeFileHash, computeFileHashFromStream, computeFileHashSync, computeFileInfo, createAndInitializeModule, createBasicFileManager, createDropboxAuth, createDropboxModule, createEmptyFileDataStructure, createEmptyNamingRuleSchema, createFileItem, createFileManager, createFileMetadataService, createFileRef, createFolderItem, createGoogleDriveAuth, createGoogleDriveModule, createHazoFilesServer, createInitializedFileManager, createInitializedTrackedFileManager, createLLMExtractionService, createLiteralSegment, createLocalModule, createModule, createNamingConventionService, createPurgeJobHandlers, createQuotaService, createTrackedFileManager, createUploadExtractService, createVariableSegment, deepMerge, errorResult, filterItems, formatBytes, formatCounter, formatDateToken, generateExtractionId, generateId, generatePreviewName, generateRefId, generateSampleConfig, generateSegmentId, getBaseName, getBreadcrumbs, getDirName, getExtension, getExtensionFromMime, getExtractionById, getExtractionCount, getExtractions, getFileCategory, getFileMetadataValues, getMergedData, getMigrationForTable, getMigrationV3ForTable, getMigrationV4ForTable, getMimeType, getNameWithoutExtension, getNamingSchemaForTable, getParentPath, getPathSegments, getRegisteredProviders, getRelativePath, getSchemaForTable, getSystemVariablePreviewValues, hasExtension, hasExtractionStructure, hasFileContentChanged, hashesEqual, hazo_files_generate_file_name, hazo_files_generate_folder_name, isAudio, isChildPath, isCounterVariable, isDateVariable, isDocument, isFile, isFileMetadataVariable, isFolder, isImage, isPreviewable, isProviderRegistered, isText, isVideo, joinPath, loadConfig, loadConfigAsync, migrateToV2, migrateToV3, normalizePath, parseConfig, parseFileData, parseFileRefs, parsePatternString, patternToString, recalculateMergedData, registerModule, removeExtractionById, removeExtractionByIndex, removeRefFromArray, removeRefsByCriteriaFromArray, sanitizeFilename, saveConfig, sortItems, stringifyFileData, stringifyFileRefs, successResult, toV2Record, updateExtractionById, validateExtractionData, validateFileDataStructure, validateNamingRuleSchema, validatePath };
+interface ExternalFileLinkOptions {
+    serve_base?: string;
+    serve_path?: string;
+    metadata?: FileMetadataRecord;
+}
+interface ExternalFileLink {
+    url: string;
+    link_type: 'provider_managed' | 'app_gated';
+    storage_type: StorageProvider | string;
+}
+interface ExternalFileLinkDeps {
+    metadataService: Pick<FileMetadataService, 'findById'>;
+}
+declare function external_file_link(file_id: string, deps: ExternalFileLinkDeps, opts?: ExternalFileLinkOptions): Promise<ExternalFileLink>;
+type ExternalFileLinkResult = ExternalFileLink | {
+    error: string;
+};
+declare function external_file_links(file_ids: string[], deps: ExternalFileLinkDeps, opts?: ExternalFileLinkOptions): Promise<Record<string, ExternalFileLinkResult>>;
+
+interface FileServeAuthContext {
+    request: Request;
+    file_id: string;
+}
+interface FileServeUser {
+    user_id?: string;
+    [k: string]: unknown;
+}
+interface FileServeHandlerOptions {
+    provider: Pick<FileStorageProvider, 'get'>;
+    metadataService: Pick<FileMetadataService, 'findById'>;
+    authenticate?: (ctx: FileServeAuthContext) => Promise<FileServeUser | null>;
+    authorize?: (ctx: FileServeAuthContext & {
+        user: FileServeUser;
+        metadata: FileMetadataRecord;
+    }) => Promise<boolean>;
+    get_file_id?: (request: Request) => string | null;
+}
+declare function createFileServeHandler(opts: FileServeHandlerOptions): (request: Request) => Promise<Response>;
+
+export { ALL_SYSTEM_VARIABLES, type AddExtractionOptions, type AddRefOptions, type AppFileServerOpts, AppFileServerProvider, type AuthCallbacks, AuthenticationError, type CleanupOrphanedOptions, ConfigurationError, type ContentTagConfig, type CreateFolderOptions, type CrudServiceLike, DEFAULT_DATE_FORMATS, type DatabaseSchemaDefinition, type DatabaseTrackingConfig, DirectoryExistsError, DirectoryNotEmptyError, DirectoryNotFoundError, type DownloadOptions, type DrivePathCache, DropboxAuth, type DropboxAuthCallbacks, type DropboxAuthConfig, type DropboxConfig, DropboxModule, type DropboxTokenData, type ExternalFileLink, type ExternalFileLinkDeps, type ExternalFileLinkOptions, type ExternalFileLinkResult, type ExtractionData, type ExtractionOptions, type ExtractionResult, type FileBrowserState, type FileDataStructure, type FileEntry, FileExistsError, type FileInfo, type FileItem, FileManager, type FileManagerOptions, type FileMetadataInput, type FileMetadataRecord, type FileMetadataRecordV2, FileMetadataService, type FileMetadataServiceOptions, type FileMetadataUpdate, FileNotFoundError, type FileRef, type FileRefVisibility, type FileServeAuthContext, type FileServeHandlerOptions, type FileServeUser, type FileStatus, type FileStorageProvider, type FileSystemItem, FileTooLargeError, type FileWithStatus, type FindOrphanedOptions, type FolderItem, type GeneratedNameResult, type GoogleAuthConfig, GoogleDriveAuth, type GoogleDriveConfig, GoogleDriveModule, type GoogleDriveOpts, GoogleDriveProvider, HAZO_FILES_DEFAULT_TABLE_NAME, HAZO_FILES_JOB_TYPES, HAZO_FILES_MIGRATION_V2, HAZO_FILES_MIGRATION_V3, HAZO_FILES_MIGRATION_V4, HAZO_FILES_NAMING_DEFAULT_TABLE_NAME, HAZO_FILES_NAMING_TABLE_SCHEMA, HAZO_FILES_TABLE_SCHEMA, HAZO_FILE_QUOTAS_DEFAULT_TABLE_NAME, HAZO_FILE_QUOTAS_TABLE_SCHEMA, type HazoFileQuotasColumnDefinitions, type HazoFilesColumnDefinitions, type HazoFilesConfig, type HazoFilesJobType, type HazoFilesMigrationV2, type HazoFilesMigrationV3, type HazoFilesMigrationV4, type HazoFilesNamingColumnDefinitions, type HazoFilesNamingTableSchema, type HazoFilesServerInstance, type HazoFilesServerOptions, type HazoFilesTableSchema, type HazoLLMInstance, type HazoLogger, ImportSizeCapError, InMemoryProvider, InvalidExtensionError, InvalidPathError, LLMExtractionService, type LLMFactory, type LLMFactoryConfig, type LLMProvider, type ListNamingConventionsOptions, type ListOptions, type LocalStorageConfig, LocalStorageModule, type MetadataLogger, type MigrationExecutor, type MigrationSchemaDefinition, type MoveOptions, type NameGenerationOptions, type NamingConventionInput, type NamingConventionRecord, NamingConventionService, type NamingConventionServiceOptions, type NamingConventionType, type NamingConventionUpdate, type NamingRuleConfiguratorProps, type NamingRuleHistoryEntry, type NamingRuleSchema, type NamingVariable, OperationError, type OperationResult, type ParsedNamingConvention, type PatternSegment, PermissionDeniedError, type ProbeResult, type ProgressCallback, type PurgeJobHandlerOptions, type PurgeOnePayload, type PurgePlanPayload, type PurgePlanResult, type PutOpts, type PutResult, type QuotaCrudServiceLike, QuotaExceededError, QuotaService, type QuotaServiceOptions, type QuotaStatus, type QuotaThresholdEvent, type RemoveExtractionOptions, type RemoveRefsCriteria, type RenameOptions, SSRFError, SYSTEM_COUNTER_VARIABLES, SYSTEM_DATE_VARIABLES, SYSTEM_FILE_VARIABLES, type SignedUrlOpts, StorageCollisionExhausted, type StorageModule, StorageNotConfigured, type StoragePath, type StorageProvider, StorageUnavailable, type TokenData, TrackedFileManager, type TrackedFileManagerFullOptions, type TrackedFileManagerOptions, type TrackedUploadOptions, type TreeNode, type UploadExtractOptions, type UploadExtractResult, UploadExtractService, type UploadOptions, type UploadWithRefOptions, type UseNamingRuleActions, type UseNamingRuleReturn, type UseNamingRuleState, type VariableCategory, addExtractionToFileData, backfillV2Defaults, buildFileWithStatus, clearExtractions, clonePattern, computeFileHash, computeFileHashFromStream, computeFileHashSync, computeFileInfo, createAndInitializeModule, createBasicFileManager, createDropboxAuth, createDropboxModule, createEmptyFileDataStructure, createEmptyNamingRuleSchema, createFileItem, createFileManager, createFileMetadataService, createFileRef, createFileServeHandler, createFolderItem, createGoogleDriveAuth, createGoogleDriveModule, createHazoFilesServer, createInitializedFileManager, createInitializedTrackedFileManager, createLLMExtractionService, createLiteralSegment, createLocalModule, createModule, createNamingConventionService, createPurgeJobHandlers, createQuotaService, createTrackedFileManager, createUploadExtractService, createVariableSegment, deepMerge, errorResult, external_file_link, external_file_links, filterItems, formatBytes, formatCounter, formatDateToken, generateExtractionId, generateId, generatePreviewName, generateRefId, generateSampleConfig, generateSegmentId, getBaseName, getBreadcrumbs, getDirName, getExtension, getExtensionFromMime, getExtractionById, getExtractionCount, getExtractions, getFileCategory, getFileMetadataValues, getMergedData, getMigrationForTable, getMigrationV3ForTable, getMigrationV4ForTable, getMimeType, getNameWithoutExtension, getNamingSchemaForTable, getParentPath, getPathSegments, getRegisteredProviders, getRelativePath, getSchemaForTable, getSystemVariablePreviewValues, hasExtension, hasExtractionStructure, hasFileContentChanged, hashesEqual, hazo_files_generate_file_name, hazo_files_generate_folder_name, isAudio, isChildPath, isCounterVariable, isDateVariable, isDocument, isFile, isFileMetadataVariable, isFolder, isImage, isPreviewable, isProviderRegistered, isText, isVideo, joinPath, loadConfig, loadConfigAsync, migrateToV2, migrateToV3, normalizePath, parseConfig, parseFileData, parseFileRefs, parsePatternString, patternToString, recalculateMergedData, registerModule, removeExtractionById, removeExtractionByIndex, removeRefFromArray, removeRefsByCriteriaFromArray, sanitizeFilename, saveConfig, sortItems, stringifyFileData, stringifyFileRefs, successResult, toV2Record, updateExtractionById, validateExtractionData, validateFileDataStructure, validateNamingRuleSchema, validatePath };

package/dist/server/index.js

@@ -98,6 +98,7 @@ __export(index_exports, {
   createFileManager: () => createFileManager,
   createFileMetadataService: () => createFileMetadataService,
   createFileRef: () => createFileRef,
+  createFileServeHandler: () => createFileServeHandler,
   createFolderItem: () => createFolderItem,
   createGoogleDriveAuth: () => createGoogleDriveAuth,
   createGoogleDriveModule: () => createGoogleDriveModule,
@@ -116,6 +117,8 @@ __export(index_exports, {
   createVariableSegment: () => createVariableSegment,
   deepMerge: () => deepMerge,
   errorResult: () => errorResult,
+  external_file_link: () => external_file_link,
+  external_file_links: () => external_file_links,
   filterItems: () => filterItems,
   formatBytes: () => formatBytes,
   formatCounter: () => formatCounter,
@@ -21090,6 +21093,51 @@ var AppFileServerProvider = class {
       return { ok: false, error: "write_denied", message: String(err) };
     }
   }
+  async list(prefix) {
+    const abs = this.resolve(prefix);
+    if (!(0, import_node_fs.existsSync)(abs)) return [];
+    const stat = (0, import_node_fs.statSync)(abs);
+    if (!stat.isDirectory()) {
+      return [{ path: prefix, name: (0, import_node_path.basename)(prefix), size: stat.size, isDirectory: false }];
+    }
+    const entries = [];
+    this.walkDir(abs, prefix, entries);
+    return entries;
+  }
+  walkDir(absDir, logicalDir, out) {
+    const base = logicalDir.endsWith("/") ? logicalDir : `${logicalDir}/`;
+    for (const item of (0, import_node_fs.readdirSync)(absDir, { withFileTypes: true })) {
+      const logicalPath = `${base}${item.name}`;
+      const absPath = (0, import_node_path.join)(absDir, item.name);
+      if (item.isDirectory()) {
+        out.push({ path: logicalPath, name: item.name, size: 0, isDirectory: true });
+        this.walkDir(absPath, logicalPath, out);
+      } else {
+        const st = (0, import_node_fs.statSync)(absPath);
+        out.push({ path: logicalPath, name: item.name, size: st.size, isDirectory: false });
+      }
+    }
+  }
+  async move(from, to) {
+    const absFrom = this.resolve(from);
+    const absTo = this.resolve(to);
+    if (!(0, import_node_fs.existsSync)(absFrom)) throw new Error(`Not found: ${from}`);
+    (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(absTo), { recursive: true });
+    try {
+      (0, import_node_fs.renameSync)(absFrom, absTo);
+    } catch (err) {
+      const e = err;
+      if (e.code === "EXDEV") {
+        (0, import_node_fs.copyFileSync)(absFrom, absTo);
+        (0, import_node_fs.rmSync)(absFrom, { force: true });
+      } else {
+        throw err;
+      }
+    }
+  }
+  async rename(from, to) {
+    return this.move(from, to);
+  }
 };
 async function streamToBuffer(s) {
   const chunks = [];
@@ -21128,6 +21176,39 @@ var InMemoryProvider = class {
   async probe() {
     return { ok: true };
   }
+  async list(prefix) {
+    const base = prefix.replace(/\/$/, "");
+    const matchPrefix = `${base}/`;
+    const entries = [];
+    const seenDirs = /* @__PURE__ */ new Set();
+    for (const [key, buf] of this.store.entries()) {
+      if (key !== base && !key.startsWith(matchPrefix)) continue;
+      const rel = key.startsWith(matchPrefix) ? key.slice(matchPrefix.length) : "";
+      if (!rel) {
+        entries.push({ path: key, name: key.split("/").pop(), size: buf.length, isDirectory: false });
+        continue;
+      }
+      const parts = rel.split("/");
+      for (let i = 1; i < parts.length; i++) {
+        const dirPath = matchPrefix + parts.slice(0, i).join("/");
+        if (!seenDirs.has(dirPath)) {
+          seenDirs.add(dirPath);
+          entries.push({ path: dirPath, name: parts[i - 1], size: 0, isDirectory: true });
+        }
+      }
+      entries.push({ path: key, name: parts[parts.length - 1], size: buf.length, isDirectory: false });
+    }
+    return entries;
+  }
+  async move(from, to) {
+    const buf = this.store.get(from);
+    if (!buf) throw new Error(`Not found: ${from}`);
+    this.store.set(to, buf);
+    this.store.delete(from);
+  }
+  async rename(from, to) {
+    return this.move(from, to);
+  }
   /** Test-only escape hatch — exposes the internal store for assertions. */
   snapshot() {
     return new Map(this.store);
@@ -21223,6 +21304,60 @@ var GoogleDriveProvider = class {
     const id = await this.lookupFileId(path4);
     return `https://drive.google.com/uc?id=${id}&export=download`;
   }
+  async list(prefix) {
+    const segments = prefix.split("/").filter(Boolean);
+    let parentId;
+    try {
+      parentId = await this.resolvePath(segments, { create: false });
+    } catch {
+      return [];
+    }
+    const res = await this.drive.files.list({
+      q: `'${parentId}' in parents and trashed=false`,
+      driveId: this.driveId,
+      corpora: "drive",
+      includeItemsFromAllDrives: true,
+      fields: "files(id, name, mimeType, size)"
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    });
+    const files = res.data.files ?? [];
+    const base = prefix.endsWith("/") ? prefix : `${prefix}/`;
+    return files.map((f) => ({
+      path: `${base}${f.name}`,
+      name: f.name,
+      size: Number(f.size ?? 0),
+      isDirectory: f.mimeType === "application/vnd.google-apps.folder"
+    }));
+  }
+  async move(from, to) {
+    const id = await this.lookupFileId(from);
+    const fromSegs = from.split("/").filter(Boolean);
+    fromSegs.pop();
+    const toSegs = to.split("/").filter(Boolean);
+    const newName = toSegs.pop();
+    const oldParentId = await this.resolvePath(fromSegs, { create: false });
+    const newParentId = await this.resolvePath(toSegs, { create: true });
+    await this.drive.files.update({
+      fileId: id,
+      addParents: newParentId,
+      removeParents: oldParentId,
+      requestBody: { name: newName },
+      supportsAllDrives: true,
+      fields: "id, parents"
+    });
+    await this.cache.invalidate(from);
+  }
+  async rename(from, to) {
+    const id = await this.lookupFileId(from);
+    const segs = to.split("/").filter(Boolean);
+    const newName = segs[segs.length - 1];
+    await this.drive.files.update({
+      fileId: id,
+      requestBody: { name: newName },
+      supportsAllDrives: true,
+      fields: "id, name"
+    });
+  }
   async resolvePath(segments, opts) {
     let parentId = this.driveId;
     const accumulated = [];
@@ -21340,6 +21475,132 @@ async function migrateToV3(executor, dbType, tableName) {
   }
 }
 
+// src/server/external-file-link.ts
+function assert_absolute_http(base) {
+  if (!/^https?:\/\//i.test(base)) {
+    throw new Error(`external_file_link: serve_base must be an absolute http(s) URL, got "${base}"`);
+  }
+}
+async function external_file_link(file_id, deps, opts = {}) {
+  const record2 = opts.metadata ?? await deps.metadataService.findById(file_id);
+  if (!record2) throw new Error(`external_file_link: file not found (${file_id})`);
+  const storage_type = record2.storage_type;
+  if (storage_type === "local" || storage_type === "app_file_server") {
+    const base = opts.serve_base;
+    if (!base) {
+      throw new Error(`external_file_link: serve_base is required for ${storage_type} storage (file ${file_id})`);
+    }
+    assert_absolute_http(base);
+    const path4 = opts.serve_path ?? "/api/files/serve";
+    const url2 = `${base.replace(/\/$/, "")}${path4}?file_id=${encodeURIComponent(file_id)}`;
+    return { url: url2, link_type: "app_gated", storage_type };
+  }
+  if (storage_type === "google_drive") {
+    const url2 = read_drive_link(record2);
+    if (!url2) throw new Error(`external_file_link: no Google Drive link for file ${file_id}`);
+    return { url: url2, link_type: "provider_managed", storage_type };
+  }
+  if (storage_type === "dropbox") {
+    throw new Error("external_file_link: Dropbox storage is not yet supported");
+  }
+  throw new Error(`external_file_link: Unsupported storage_type "${storage_type}" (file ${file_id})`);
+}
+function read_drive_link(record2) {
+  let data = {};
+  try {
+    data = JSON.parse(record2.file_data || "{}");
+  } catch {
+    data = {};
+  }
+  const nested = data.metadata ?? {};
+  const webViewLink = data.webViewLink ?? nested.webViewLink;
+  if (typeof webViewLink === "string" && webViewLink) return webViewLink;
+  const driveId = data.driveId ?? nested.driveId;
+  if (typeof driveId === "string" && driveId) return `https://drive.google.com/file/d/${driveId}/view`;
+  return null;
+}
+async function external_file_links(file_ids, deps, opts = {}) {
+  const out = {};
+  await Promise.all(
+    file_ids.map(async (id) => {
+      try {
+        out[id] = await external_file_link(id, deps, opts);
+      } catch (err) {
+        out[id] = { error: err instanceof Error ? err.message : String(err) };
+      }
+    })
+  );
+  return out;
+}
+
+// src/server/file-serve-handler.ts
+var import_node_stream = require("stream");
+function default_get_file_id(request) {
+  return new URL(request.url).searchParams.get("file_id");
+}
+function to_body(data) {
+  if (Buffer.isBuffer(data)) return data;
+  return import_node_stream.Readable.toWeb(data);
+}
+var INLINE_SAFE_TYPES = /* @__PURE__ */ new Set([
+  "image/png",
+  "image/jpeg",
+  "image/jpg",
+  "image/gif",
+  "image/webp",
+  "image/avif",
+  "application/pdf",
+  "text/plain"
+]);
+function safe_content_headers(mime, filename) {
+  const safe_name = filename.replace(/"/g, "");
+  const inline_safe = INLINE_SAFE_TYPES.has(mime) || mime.startsWith("video/") || mime.startsWith("audio/");
+  return {
+    "Content-Type": inline_safe ? mime : "application/octet-stream",
+    "Content-Disposition": `${inline_safe ? "inline" : "attachment"}; filename="${safe_name}"`,
+    "X-Content-Type-Options": "nosniff",
+    "Content-Security-Policy": "sandbox"
+  };
+}
+function createFileServeHandler(opts) {
+  const get_file_id = opts.get_file_id ?? default_get_file_id;
+  return async function handle(request) {
+    const file_id = get_file_id(request);
+    if (!file_id) return new Response("Missing file_id", { status: 400 });
+    if (opts.authenticate) {
+      let user = null;
+      try {
+        user = await opts.authenticate({ request, file_id });
+      } catch {
+        user = null;
+      }
+      if (!user) return new Response("Unauthorized", { status: 401 });
+      const metadata2 = await opts.metadataService.findById(file_id);
+      if (!metadata2) return new Response("Not found", { status: 404 });
+      if (opts.authorize) {
+        const allowed = await opts.authorize({ request, file_id, user, metadata: metadata2 });
+        if (!allowed) return new Response("Forbidden", { status: 403 });
+      }
+      return serve(opts.provider, metadata2);
+    }
+    const metadata = await opts.metadataService.findById(file_id);
+    if (!metadata) return new Response("Not found", { status: 404 });
+    return serve(opts.provider, metadata);
+  };
+}
+async function serve(provider, metadata) {
+  try {
+    const data = await provider.get(metadata.file_path);
+    const name = metadata.original_filename || metadata.filename || getBaseName(metadata.file_path);
+    return new Response(to_body(data), {
+      status: 200,
+      headers: safe_content_headers(getMimeType(name), name)
+    });
+  } catch {
+    return new Response("Internal error", { status: 500 });
+  }
+}
+
 // src/server/index.ts
 var log6 = (0, import_hazo_core8.createLogger)("hazo_files");
 try {
@@ -21417,6 +21678,7 @@ try {
   createFileManager,
   createFileMetadataService,
   createFileRef,
+  createFileServeHandler,
   createFolderItem,
   createGoogleDriveAuth,
   createGoogleDriveModule,
@@ -21435,6 +21697,8 @@ try {
   createVariableSegment,
   deepMerge,
   errorResult,
+  external_file_link,
+  external_file_links,
   filterItems,
   formatBytes,
   formatCounter,