openwork-server 0.18.61 → 0.18.62

package/dist/openwork-server.mjs

@@ -310371,6 +310371,14 @@ import { createHash as createHash16, randomBytes as randomBytes6 } from "node:cr
 import { constants as constants3, realpathSync } from "node:fs";
 import { lstat as lstat3, mkdir as mkdir13, open as open4, readFile as readFile24, realpath as realpath5, rename as rename7, rm as rm12, stat as stat6, writeFile as writeFile17 } from "node:fs/promises";
 import { basename as basename10, dirname as dirname15, extname as extname2, isAbsolute as isAbsolute3, join as join25, relative as relative5, resolve as resolve16 } from "node:path";
+
+// ../../packages/types/src/microsoft-drive-transfer.ts
+var MICROSOFT_DRIVE_TRANSFER_MAX_BYTES = 250 * 1024 * 1024;
+var MICROSOFT_DRIVE_PULL_CHUNK_BYTES = 8 * 1024 * 1024;
+var MICROSOFT_DRIVE_UPLOAD_CHUNK_BYTES = 32 * 320 * 1024;
+var MICROSOFT_DRIVE_UPLOAD_MAX_BYTES = 250 * 1000 ** 3;
+
+// src/extensions/drive-files.ts
 init_errors5();
 init_runtime_db();
 
@@ -310461,7 +310469,11 @@ var LINKS_FILE = "drive-links.json";
 var DEN_TIMEOUT_MS = 2 * 60 * 1000;
 var MAX_STATUS_FILES = 50;
 var CONNECTION_ID = /^(google-workspace|emc_[A-Za-z0-9]+)$/;
+var MICROSOFT_CONNECTION_ID = /^(microsoft-365|emc_[A-Za-z0-9]+)$/;
 var DRIVE_ID = /^[A-Za-z0-9_-]{1,512}$/;
+var MICROSOFT_ID = /^[^\s/\\?#]{1,512}$/;
+var MICROSOFT_LINK_HOST = /(^|\.)(sharepoint\.(com|us|cn|de)|sharepoint-mil\.us|onedrive\.(com|live\.com)|1drv\.ms)$/;
+var SERVICE_NAME = { "google-workspace": "Drive", "microsoft-365": "OneDrive or SharePoint" };
 var CONVERTIBLE_FORMATS = {
   "application/vnd.google-apps.spreadsheet": ["xlsx", "csv"],
   "application/vnd.google-apps.document": ["docx", "md", "txt"],
@@ -310487,14 +310499,47 @@ function readArgString(args2, key2) {
   const value3 = args2[key2];
   return typeof value3 === "string" ? value3.trim() : "";
 }
-function optionalConnectionId(args2) {
+function optionalConnectionId(args2, provider = "google-workspace") {
   if (args2.connectionId === undefined)
     return;
-  if (typeof args2.connectionId !== "string" || !CONNECTION_ID.test(args2.connectionId)) {
-    throw new ApiError(400, "invalid_payload", "connectionId must identify a native Google Workspace connection.");
+  const pattern = provider === "microsoft-365" ? MICROSOFT_CONNECTION_ID : CONNECTION_ID;
+  if (typeof args2.connectionId !== "string" || !pattern.test(args2.connectionId)) {
+    throw new ApiError(400, "invalid_payload", provider === "microsoft-365" ? "connectionId must identify a Microsoft 365 connection." : "connectionId must identify a native Google Workspace connection.");
   }
   return args2.connectionId;
 }
+function isMicrosoftLink(value3) {
+  try {
+    const url2 = new URL(value3);
+    return url2.protocol === "https:" && MICROSOFT_LINK_HOST.test(url2.hostname);
+  } catch {
+    return false;
+  }
+}
+function providerFor(args2) {
+  if (args2.provider !== undefined) {
+    if (args2.provider !== "google-workspace" && args2.provider !== "microsoft-365")
+      throw new ApiError(400, "invalid_payload", "provider must be google-workspace or microsoft-365.");
+    return args2.provider;
+  }
+  if (args2.driveId !== undefined || args2.connectionId === "microsoft-365")
+    return "microsoft-365";
+  return isMicrosoftLink(readArgString(args2, "fileId")) ? "microsoft-365" : "google-workspace";
+}
+function microsoftTarget(args2) {
+  const fileId = readArgString(args2, "fileId");
+  const driveId = args2.driveId === undefined ? undefined : readArgString(args2, "driveId");
+  if (driveId !== undefined && !MICROSOFT_ID.test(driveId))
+    throw new ApiError(400, "invalid_payload", "driveId must be a Microsoft drive id.");
+  if (isMicrosoftLink(fileId)) {
+    if (driveId !== undefined)
+      throw new ApiError(400, "invalid_payload", "Pass a OneDrive or SharePoint link, or an item id with its driveId, not both.");
+    return { url: fileId };
+  }
+  if (!MICROSOFT_ID.test(fileId))
+    throw new ApiError(400, "invalid_payload", "fileId must be a OneDrive or SharePoint item id or file link.");
+  return { itemId: fileId, ...driveId ? { driveId } : {} };
+}
 function parseDriveFileId(value3) {
   const trimmed = value3.trim();
   if (DRIVE_ID.test(trimmed))
@@ -310738,9 +310783,11 @@ async function denRequest(config2, dependencies, suffix, init = {}) {
       headers: {
         authorization: endpoint.authorization,
         ...init.body !== undefined ? { "content-type": "application/json" } : {},
+        ...init.bytes ? { "content-type": "application/octet-stream" } : {},
         ...init.headers
       },
       ...init.body !== undefined ? { body: JSON.stringify(init.body) } : {},
+      ...init.bytes ? { body: init.bytes } : {},
       signal: dependencies.signal ? AbortSignal.any([dependencies.signal, AbortSignal.timeout(DEN_TIMEOUT_MS)]) : AbortSignal.timeout(DEN_TIMEOUT_MS)
     });
   } catch (error48) {
@@ -310774,6 +310821,7 @@ function parseDownloadInfo(payload) {
   return {
     file: {
       id: file2.id,
+      driveId: "",
       name: file2.name,
       mimeType: file2.mimeType,
       native: file2.native === true,
@@ -310793,12 +310841,55 @@ function parseDownloadInfo(payload) {
     }
   };
 }
-async function describe4(config2, dependencies, fileId, format4, connectionId) {
-  return parseDownloadInfo(await denJson(config2, dependencies, `/v1/direct-downloads/google-workspace/drive-files/${fileId}`, { query: { format: format4, connectionId } }));
+function parseMicrosoftDownloadInfo(payload) {
+  const file2 = payload.file;
+  const download = payload.download;
+  if (!isRecord28(file2) || !isRecord28(download) || typeof file2.id !== "string" || !MICROSOFT_ID.test(file2.id) || typeof file2.name !== "string" || typeof file2.mimeType !== "string" || typeof download.mimeType !== "string" || file2.driveId !== "" && (typeof file2.driveId !== "string" || !MICROSOFT_ID.test(file2.driveId))) {
+    throw new ApiError(502, "cloud_drive_failed", "OpenWork Cloud returned an invalid OneDrive or SharePoint file description.");
+  }
+  const size6 = typeof download.size === "number" && Number.isSafeInteger(download.size) ? download.size : null;
+  return {
+    file: {
+      id: file2.id,
+      driveId: file2.driveId,
+      name: file2.name,
+      mimeType: file2.mimeType,
+      native: false,
+      revision: stringOrNull(file2.revision),
+      md5Checksum: null,
+      size: typeof file2.size === "number" ? file2.size : null,
+      webViewLink: stringOrNull(file2.webUrl),
+      parents: typeof file2.parentId === "string" && file2.parentId ? [file2.parentId] : []
+    },
+    download: {
+      format: download.format === "pdf" ? "pdf" : null,
+      mimeType: download.mimeType,
+      extension: stringOrNull(download.extension),
+      size: size6,
+      exported: download.exported === true,
+      maxBytes: typeof download.maxBytes === "number" ? Math.min(download.maxBytes, MICROSOFT_DRIVE_TRANSFER_MAX_BYTES) : MICROSOFT_DRIVE_TRANSFER_MAX_BYTES
+    }
+  };
+}
+async function describe4(config2, dependencies, target, format4, connectionId) {
+  if ("fileId" in target) {
+    return parseDownloadInfo(await denJson(config2, dependencies, `/v1/direct-downloads/google-workspace/drive-files/${target.fileId}`, { query: { format: format4, connectionId } }));
+  }
+  const query = "url" in target ? { url: target.url } : { itemId: target.itemId, driveId: target.driveId };
+  return parseMicrosoftDownloadInfo(await denJson(config2, dependencies, "/v1/direct-downloads/microsoft-365/drive-files", { query: { ...query, format: format4, connectionId } }));
+}
+function describedTarget(provider, info) {
+  return provider === "microsoft-365" ? { itemId: info.file.id, ...info.file.driveId ? { driveId: info.file.driveId } : {} } : { fileId: info.file.id };
 }
-async function download(config2, dependencies, info, connectionId, handle) {
-  const suffix = `/v1/direct-downloads/google-workspace/drive-files/${info.file.id}/content`;
-  const query = { format: info.download.exported ? info.download.format ?? undefined : undefined, connectionId };
+function linkTarget(link2) {
+  return link2.provider === "microsoft-365" ? { itemId: link2.fileId, ...link2.driveId ? { driveId: link2.driveId } : {} } : { fileId: link2.fileId };
+}
+async function download(config2, dependencies, provider, info, connectionId, handle) {
+  const format4 = info.download.exported ? info.download.format ?? undefined : undefined;
+  const microsoft = provider === "microsoft-365";
+  const suffix = microsoft ? "/v1/direct-downloads/microsoft-365/drive-files/content" : `/v1/direct-downloads/google-workspace/drive-files/${info.file.id}/content`;
+  const query = microsoft ? { itemId: info.file.id, driveId: info.file.driveId || undefined, format: format4, connectionId } : { format: format4, connectionId };
+  const chunkBytes = microsoft ? MICROSOFT_DRIVE_PULL_CHUNK_BYTES : GOOGLE_DRIVE_PULL_CHUNK_BYTES;
   const sha256 = createHash16("sha256");
   const md5 = createHash16("md5");
   let written = 0;
@@ -310812,14 +310903,14 @@ async function download(config2, dependencies, info, connectionId, handle) {
   };
   const size6 = info.download.size;
   if (!info.download.exported && size6 !== null) {
-    for (let start = 0;start < size6; start += GOOGLE_DRIVE_PULL_CHUNK_BYTES) {
-      const end = Math.min(size6, start + GOOGLE_DRIVE_PULL_CHUNK_BYTES) - 1;
+    for (let start = 0;start < size6; start += chunkBytes) {
+      const end = Math.min(size6, start + chunkBytes) - 1;
       const response = await denRequest(config2, dependencies, suffix, { query, headers: { range: `bytes=${start}-${end}` } });
       if (!response.ok)
         await denFailure(response);
       if (response.status !== 206 && !(response.status === 200 && start === 0 && end === size6 - 1)) {
         await response.body?.cancel();
-        throw new ApiError(502, "drive_download_incomplete", "Google did not return the requested part of the file. Try the pull again.");
+        throw new ApiError(502, "drive_download_incomplete", "The requested part of the file did not arrive. Try the pull again.");
       }
       const bytes = new Uint8Array(await response.arrayBuffer().catch(() => {
         throw new ApiError(502, "drive_download_incomplete", "The download stopped early. Try the pull again.");
@@ -310833,7 +310924,7 @@ async function download(config2, dependencies, info, connectionId, handle) {
     if (!response.ok)
       await denFailure(response);
     if (!response.body)
-      throw new ApiError(502, "drive_download_incomplete", "Google returned no file content.");
+      throw new ApiError(502, "drive_download_incomplete", "No file content arrived.");
     try {
       for await (const chunk of response.body)
         await write(chunk);
@@ -310849,21 +310940,28 @@ function verified(info, saved) {
   return (info.download.size === null || saved.size === info.download.size) && (info.download.exported || !info.file.md5Checksum || saved.md5 === info.file.md5Checksum);
 }
 async function pullDriveFile(config2, args2, context4, dependencies) {
-  const fileId = parseDriveFileId(readArgString(args2, "fileId"));
+  const provider = providerFor(args2);
+  let fileTarget = provider === "microsoft-365" ? microsoftTarget(args2) : { fileId: parseDriveFileId(readArgString(args2, "fileId")) };
   const format4 = readArgString(args2, "format") || undefined;
+  if (provider === "microsoft-365" && format4 && format4 !== "pdf")
+    throw new ApiError(400, "invalid_payload", "OneDrive and SharePoint files can only be converted to pdf; omit format to pull the file as it is.");
   if (format4 && !/^[a-z]{2,5}$/.test(format4))
     throw new ApiError(400, "invalid_payload", "format must be an export format such as xlsx, csv, docx, md, txt, pptx or pdf.");
-  const connectionId = optionalConnectionId(args2);
+  const connectionId = optionalConnectionId(args2, provider);
   const overwrite = args2.overwrite === true;
   const requested = readArgString(args2, "path") || null;
-  let info = await describe4(config2, dependencies, fileId, format4, connectionId);
-  const name = safeFileName(info.file.name, info.download.exported ? info.download.extension : null);
+  const service3 = SERVICE_NAME[provider];
+  let info = await describe4(config2, dependencies, fileTarget, format4, connectionId);
+  fileTarget = describedTarget(provider, info);
+  const converted = provider === "microsoft-365" && info.download.exported;
+  const sourceName = converted ? info.file.name.slice(0, info.file.name.length - extname2(info.file.name).length) || info.file.name : info.file.name;
+  const name = safeFileName(sourceName, info.download.exported ? info.download.extension : null);
   const links = await readLinks(config2);
   let target = await resolvePullTarget(config2, context4, requested, name);
   if (!requested) {
     const extension = extname2(name);
     const stem = name.slice(0, name.length - extension.length);
-    for (let copy2 = 2;await exists2(target) && links.links[target]?.fileId !== info.file.id; copy2 += 1) {
+    for (let copy2 = 2;await exists2(target) && !sameDriveFile(links.links[target], provider, info); copy2 += 1) {
       if (copy2 > 50)
         throw new ApiError(409, "path_exists", "Choose a path for this file; the default names are taken.");
       target = await resolvePullTarget(config2, context4, null, `${stem} (${copy2})${extension}`);
@@ -310872,24 +310970,24 @@ async function pullDriveFile(config2, args2, context4, dependencies) {
   const before = await lstat3(target).catch(() => null);
   if (before) {
     const link3 = links.links[target];
-    if (link3?.fileId === info.file.id) {
+    if (sameDriveFile(link3, provider, info)) {
       const local = await hashFile(target);
       if (local.sha256 === link3.sha256 && link3.revision !== null && link3.revision === info.file.revision && link3.format === info.download.format) {
         return pullResult(config2, context4, target, info, local.size, true);
       }
       if (!overwrite && local.sha256 !== link3.sha256) {
-        throw new ApiError(409, "local_changes", "The local copy has edits that are not in Drive. Push them first, or pull with overwrite: true to discard them.", { path: displayPath(config2, context4, target) });
+        throw new ApiError(409, "local_changes", `The local copy has edits that are not in ${service3}. Push them first, or pull with overwrite: true to discard them.`, { path: displayPath(config2, context4, target) });
       }
     } else if (!overwrite) {
       throw new ApiError(409, "path_exists", "A different file already exists at that path. Choose another path, or pass overwrite: true to replace it.");
     }
   }
   let saved = null;
-  await confirmDriveTransfer(config2, { action: before && overwrite ? "overwrite" : "pull", path: target, fileId: info.file.id, name: info.file.name, webViewLink: info.file.webViewLink }, dependencies.signal);
+  await confirmDriveTransfer(config2, { provider, action: before && overwrite ? "overwrite" : "pull", path: target, fileId: info.file.id, name: info.file.name, webViewLink: info.file.webViewLink }, dependencies.signal);
   for (let attempt = 1;attempt <= 2 && !saved; attempt += 1) {
     const temporary = await privateDriveFile(config2);
     try {
-      const result3 = await download(config2, dependencies, info, connectionId, temporary);
+      const result3 = await download(config2, dependencies, provider, info, connectionId, temporary);
       if (verified(info, result3)) {
         if (!sameState(before, await lstat3(target).catch(() => null))) {
           throw new ApiError(409, "local_changes", "The file at that path changed while pulling, so it was not replaced. Pull again once it is saved or pushed.", { path: displayPath(config2, context4, target) });
@@ -310919,10 +311017,10 @@ async function pullDriveFile(config2, args2, context4, dependencies) {
         }
       }
     } catch (error48) {
-      const transient = error48 instanceof ApiError && ["drive_download_incomplete", "google_api_error", "cloud_drive_failed"].includes(error48.code);
+      const transient = error48 instanceof ApiError && ["drive_download_incomplete", "google_api_error", "microsoft_graph_error", "cloud_drive_failed"].includes(error48.code);
       if (!transient || attempt === 2)
         throw error48;
-      const fresh = await describe4(config2, dependencies, fileId, format4, connectionId);
+      const fresh = await describe4(config2, dependencies, fileTarget, format4, connectionId);
       if (fresh.file.revision === info.file.revision)
         throw error48;
       info = fresh;
@@ -310931,11 +311029,12 @@ async function pullDriveFile(config2, args2, context4, dependencies) {
       await temporary.close();
     }
     if (!saved && attempt === 1)
-      info = await describe4(config2, dependencies, fileId, format4, connectionId);
+      info = await describe4(config2, dependencies, fileTarget, format4, connectionId);
   }
   if (!saved)
-    throw new ApiError(409, "drive_changed_during_download", "The file kept changing in Drive while downloading. Try again later.");
+    throw new ApiError(409, "drive_changed_during_download", `The file kept changing in ${service3} while downloading. Try again later.`);
   const link2 = {
+    ...provider === "microsoft-365" ? { provider, driveId: info.file.driveId } : {},
     fileId: info.file.id,
     connectionId: connectionId ?? null,
     name: info.file.name,
@@ -310964,9 +311063,21 @@ function pullResult(config2, context4, target, info, size6, upToDate) {
     mimeType: info.download.mimeType,
     ...info.download.exported ? { exportedAs: info.download.format } : {},
     ...upToDate ? { upToDate: true } : {},
-    file: { id: info.file.id, name: info.file.name, mimeType: info.file.mimeType, webViewLink: info.file.webViewLink, revision: info.file.revision }
+    file: {
+      id: info.file.id,
+      ...info.file.driveId ? { driveId: info.file.driveId } : {},
+      name: info.file.name,
+      mimeType: info.file.mimeType,
+      webViewLink: info.file.webViewLink,
+      revision: info.file.revision
+    }
   };
 }
+function sameDriveFile(link2, provider, info) {
+  if (!link2 || (link2.provider ?? "google-workspace") !== provider || link2.fileId !== info.file.id)
+    return false;
+  return provider !== "microsoft-365" || (link2.driveId ?? "") === info.file.driveId;
+}
 async function linkedEntries(config2, context4, requested) {
   const links = await readLinks(config2);
   const roots = [...allowedRoots(config2), ...await realRoots(config2)];
@@ -310986,6 +311097,9 @@ async function linkedEntries(config2, context4, requested) {
   }
   return entries3;
 }
+function linkFormat(link2) {
+  return link2.provider === "microsoft-365" || link2.native ? link2.format ?? undefined : undefined;
+}
 async function driveFileStatus(config2, args2, context4, dependencies) {
   const entries3 = await linkedEntries(config2, context4, readArgString(args2, "path"));
   const files = [];
@@ -310997,7 +311111,7 @@ async function driveFileStatus(config2, args2, context4, dependencies) {
     let currentRevision = null;
     let note;
     try {
-      const info = await describe4(config2, dependencies, link2.fileId, link2.native ? link2.format ?? undefined : undefined, link2.connectionId ?? undefined);
+      const info = await describe4(config2, dependencies, linkTarget(link2), linkFormat(link2), link2.connectionId ?? undefined);
       currentRevision = info.file.revision;
       drive = currentRevision === link2.revision ? "unchanged" : "changed";
     } catch (error48) {
@@ -311008,7 +311122,9 @@ async function driveFileStatus(config2, args2, context4, dependencies) {
     }
     files.push({
       path: displayPath(config2, context4, path3),
+      provider: link2.provider ?? "google-workspace",
       fileId: link2.fileId,
+      ...link2.driveId ? { driveId: link2.driveId } : {},
       name: link2.name,
       webViewLink: link2.webViewLink,
       local,
@@ -311059,6 +311175,8 @@ async function pushOpenFile(config2, args2, context4, dependencies, path3, handl
   const link2 = (await readLinks(config2)).links[path3];
   if (!link2)
     throw new ApiError(409, "not_linked", "That file was not pulled from Drive. Upload it as a new file with drive_upload_file instead.");
+  if (link2.provider === "microsoft-365")
+    return pushMicrosoftFile(config2, args2, context4, dependencies, path3, handle, link2);
   if (!DRIVE_ID.test(link2.fileId) || link2.connectionId !== null && !CONNECTION_ID.test(link2.connectionId)) {
     throw new ApiError(409, "invalid_link", "The saved Drive link is invalid. Pull the file again before saving.");
   }
@@ -311078,14 +311196,14 @@ async function pushOpenFile(config2, args2, context4, dependencies, path3, handl
   }
   const snapshot = await snapshotForPush(config2, handle, local, dependencies.signal);
   try {
-    const remote = await describe4(config2, dependencies, link2.fileId, link2.native ? link2.format ?? undefined : undefined, link2.connectionId ?? undefined);
+    const remote = await describe4(config2, dependencies, linkTarget(link2), linkFormat(link2), link2.connectionId ?? undefined);
     if (remote.file.id !== link2.fileId)
       throw new ApiError(409, "drive_conflict", "The Drive target changed. Pull it again before saving.");
     if (mode === "replace" && remote.file.native)
       throw new ApiError(400, "native_file_replace_unsupported", "Save this Google file as a copy instead.");
     const target = { ...link2, name: remote.file.name, driveMimeType: remote.file.mimeType, native: remote.file.native, parents: remote.file.parents };
     const convert = mode === "copy" && target.native && (CONVERTIBLE_FORMATS[target.driveMimeType] ?? []).includes(link2.format ?? "");
-    await confirmDriveTransfer(config2, { action: "push", path: path3, fileId: remote.file.id, name: remote.file.name, webViewLink: remote.file.webViewLink, mode: mode === "copy" ? "copy" : "replace" }, dependencies.signal);
+    await confirmDriveTransfer(config2, { provider: "google-workspace", action: "push", path: path3, fileId: remote.file.id, name: remote.file.name, webViewLink: remote.file.webViewLink, mode: mode === "copy" ? "copy" : "replace" }, dependencies.signal);
     await assertStableFolder(config2, dirname15(path3));
     await assertSameFile(path3, await handle.stat());
     if ((await hashHandle(handle)).sha256 !== local.sha256) {
@@ -311141,6 +311259,163 @@ async function pushOpenFile(config2, args2, context4, dependencies, path3, handl
     await snapshot.close();
   }
 }
+async function relayProgress(response) {
+  const payload = await response.json().catch(() => null);
+  if (!response.ok) {
+    const code = isRecord28(payload) && typeof payload.error === "string" ? payload.error : "";
+    if (response.status >= 500 || code === "upload_out_of_order")
+      return "uncertain";
+    const message = isRecord28(payload) && typeof payload.message === "string" ? payload.message : `OpenWork Cloud returned HTTP ${response.status}.`;
+    const details = isRecord28(payload) ? Object.fromEntries(Object.entries(payload).filter(([key2]) => key2 === "currentRevision" || key2 === "modifiedTime")) : {};
+    throw new ApiError(response.status, code || "cloud_drive_failed", message, Object.keys(details).length ? details : undefined);
+  }
+  if (isRecord28(payload) && payload.status === "partial" && typeof payload.nextOffset === "number" && Number.isSafeInteger(payload.nextOffset)) {
+    return { status: "partial", nextOffset: payload.nextOffset };
+  }
+  if (isRecord28(payload) && payload.status === "complete" && isRecord28(payload.file) && typeof payload.file.id === "string" && MICROSOFT_ID.test(payload.file.id)) {
+    return { status: "complete", file: payload.file };
+  }
+  return "uncertain";
+}
+async function uploadMicrosoftRelayFile(config2, dependencies, input) {
+  const suffix = "/v1/direct-uploads/microsoft-365/drive-upload-sessions/content";
+  const query = { token: input.token };
+  const unconfirmed = () => new ApiError(502, "drive_upload_unconfirmed", "Microsoft did not confirm the upload. Check the file before retrying; no new upload was started.");
+  let offset2 = 0;
+  let recoveries = 0;
+  while (true) {
+    dependencies.signal?.throwIfAborted();
+    const length = Math.min(input.chunkBytes, input.size - offset2);
+    const bytes = new Uint8Array(length);
+    for (let read2 = 0;read2 < length; ) {
+      const part = await input.file.read(bytes, read2, length - read2, offset2 + read2);
+      if (!part.bytesRead)
+        throw new ApiError(409, "file_changed", "The file was truncated during upload.");
+      read2 += part.bytesRead;
+    }
+    let result3;
+    try {
+      result3 = await relayProgress(await denRequest(config2, dependencies, suffix, {
+        method: "PUT",
+        query,
+        headers: { "content-range": `bytes ${offset2}-${offset2 + length - 1}/${input.size}` },
+        bytes
+      }));
+    } catch (error48) {
+      if (!(error48 instanceof ApiError) || error48.code !== "cloud_unreachable")
+        throw error48;
+      result3 = "uncertain";
+    }
+    if (result3 === "uncertain") {
+      if (++recoveries > 2)
+        throw unconfirmed();
+      try {
+        result3 = await relayProgress(await denRequest(config2, dependencies, suffix, { query }));
+      } catch (error48) {
+        if (error48 instanceof ApiError && error48.code === "cloud_unreachable")
+          throw unconfirmed();
+        throw error48;
+      }
+      if (result3 === "uncertain")
+        throw unconfirmed();
+    }
+    if (result3.status === "complete")
+      return result3.file;
+    if (result3.nextOffset < 0 || result3.nextOffset >= input.size)
+      throw unconfirmed();
+    if (result3.nextOffset <= offset2 && ++recoveries > 2)
+      throw new ApiError(502, "drive_upload_unconfirmed", "Microsoft's upload made no progress. Completion is not confirmed; check the file before retrying.");
+    offset2 = result3.nextOffset;
+  }
+}
+async function pushMicrosoftFile(config2, args2, context4, dependencies, path3, handle, link2) {
+  if (!MICROSOFT_ID.test(link2.fileId) || link2.driveId && !MICROSOFT_ID.test(link2.driveId) || link2.connectionId !== null && !MICROSOFT_CONNECTION_ID.test(link2.connectionId)) {
+    throw new ApiError(409, "invalid_link", "The saved OneDrive or SharePoint link is invalid. Pull the file again before saving.");
+  }
+  const modeArg = readArgString(args2, "mode");
+  if (modeArg && modeArg !== "replace" && modeArg !== "copy")
+    throw new ApiError(400, "invalid_payload", "mode must be replace or copy.");
+  const converted = link2.format !== null;
+  const mode = modeArg || (converted ? "copy" : "replace");
+  if (mode === "replace" && converted) {
+    throw new ApiError(400, "converted_file_replace_unsupported", "A PDF made from this file cannot replace the original. Push with mode copy to save the PDF next to it.");
+  }
+  if (mode === "replace" && !link2.revision) {
+    throw new ApiError(409, "revision_unknown", "Microsoft reported no revision when this file was pulled, so newer changes could not be detected. Pull it again, or save the edits as a copy.");
+  }
+  const local = await hashHandle(handle);
+  if (local.size > MICROSOFT_DRIVE_TRANSFER_MAX_BYTES) {
+    throw new ApiError(413, "file_too_large", `Saving to OneDrive or SharePoint supports files up to ${MICROSOFT_DRIVE_TRANSFER_MAX_BYTES} bytes.`);
+  }
+  if (mode === "replace" && local.sha256 === link2.sha256) {
+    return { ok: true, unchanged: true, path: displayPath(config2, context4, path3), file: { id: link2.fileId, driveId: link2.driveId ?? "", name: link2.name, webViewLink: link2.webViewLink, revision: link2.revision } };
+  }
+  const snapshot = await snapshotForPush(config2, handle, local, dependencies.signal);
+  try {
+    const remote = await describe4(config2, dependencies, linkTarget(link2), undefined, link2.connectionId ?? undefined);
+    if (remote.file.id !== link2.fileId)
+      throw new ApiError(409, "drive_conflict", "The OneDrive or SharePoint target changed. Pull it again before saving.");
+    await confirmDriveTransfer(config2, { provider: "microsoft-365", action: "push", path: path3, fileId: remote.file.id, name: remote.file.name, webViewLink: remote.file.webViewLink, mode: mode === "copy" ? "copy" : "replace" }, dependencies.signal);
+    await assertStableFolder(config2, dirname15(path3));
+    await assertSameFile(path3, await handle.stat());
+    if ((await hashHandle(handle)).sha256 !== local.sha256) {
+      throw new ApiError(409, "local_changes", "The local file changed while confirmation was open. Nothing was uploaded; review the edits and save again.");
+    }
+    const extension = converted ? ".pdf" : extname2(remote.file.name);
+    const stem = remote.file.name.slice(0, remote.file.name.length - extname2(remote.file.name).length);
+    const requestedName = readArgString(args2, "name").replace(/[/\\\x00-\x1f\x7f]/g, "_").slice(0, 255);
+    const name = requestedName || `${stem} (edited)${extension}`;
+    const driveId = remote.file.driveId || link2.driveId;
+    const session2 = await denJson(config2, dependencies, "/v1/direct-uploads/microsoft-365/drive-upload-sessions", {
+      method: "POST",
+      body: {
+        size: local.size,
+        ...link2.connectionId ? { connectionId: link2.connectionId } : {},
+        ...driveId ? { driveId } : {},
+        ...mode === "replace" ? { itemId: link2.fileId, baseRevision: link2.revision } : { name, conflictBehavior: "rename", ...remote.file.parents[0] ? { folderId: remote.file.parents[0] } : {} }
+      }
+    });
+    const chunkBytes = session2.chunkSize;
+    if (typeof session2.uploadToken !== "string" || session2.size !== local.size || typeof chunkBytes !== "number" || !Number.isSafeInteger(chunkBytes) || chunkBytes < 1 || chunkBytes > MICROSOFT_DRIVE_UPLOAD_CHUNK_BYTES || chunkBytes % (320 * 1024) !== 0) {
+      throw new ApiError(502, "invalid_upload_session", "OpenWork Cloud returned an invalid upload session.");
+    }
+    const file2 = await uploadMicrosoftRelayFile(config2, dependencies, { token: session2.uploadToken, file: snapshot, size: local.size, chunkBytes });
+    const revision = stringOrNull(file2.eTag);
+    const savedName = typeof file2.name === "string" && file2.name ? file2.name : name;
+    const savedDriveId = typeof file2.driveId === "string" && MICROSOFT_ID.test(file2.driveId) ? file2.driveId : driveId ?? "";
+    const webViewLink = typeof file2.webUrl === "string" && file2.webUrl ? file2.webUrl : mode === "replace" ? link2.webViewLink : null;
+    const driveMimeType = typeof file2.mimeType === "string" && file2.mimeType ? file2.mimeType : link2.driveMimeType;
+    await withLinks(config2, (current2) => {
+      current2.links[path3] = {
+        ...link2,
+        provider: "microsoft-365",
+        fileId: file2.id,
+        driveId: savedDriveId,
+        name: savedName,
+        driveMimeType,
+        native: false,
+        format: null,
+        revision,
+        md5Checksum: null,
+        sha256: local.sha256,
+        size: local.size,
+        webViewLink,
+        pushedAt: new Date().toISOString()
+      };
+    });
+    const replaces = isRecord28(session2.replaces) ? session2.replaces : null;
+    return {
+      ok: true,
+      mode,
+      path: displayPath(config2, context4, path3),
+      size: local.size,
+      file: { id: file2.id, driveId: savedDriveId, name: savedName, mimeType: driveMimeType, webViewLink, revision },
+      ...mode === "replace" ? { previousRevision: stringOrNull(replaces?.previousRevision) } : { copiedFrom: link2.fileId }
+    };
+  } finally {
+    await snapshot.close();
+  }
+}
 async function callDriveFileAction(config2, action, args2, context4, dependencies = {}) {
   if (action === "drive_pull_file")
     return pullDriveFile(config2, args2, context4, dependencies);
@@ -318752,12 +319027,14 @@ async function uiBridgeRequest(path3, options = {}) {
 // src/opencode-plugins/drive-file-tools.ts
 init_zod();
 var DRIVE_FILE_ACTIONS = ["drive_pull_file", "drive_file_status", "drive_push_file"];
-var connectionId = exports_external.string().regex(/^(google-workspace|emc_[A-Za-z0-9]+)$/).optional().describe("Selected Google Workspace connection; omit for the default. Unavailable selections never fall back to another account.");
+var connectionId = exports_external.string().regex(/^(google-workspace|microsoft-365|emc_[A-Za-z0-9]+)$/).optional().describe("Selected Google Workspace or Microsoft 365 connection; omit for the default. Unavailable selections never fall back to another account.");
 var workspacePath = exports_external.string().min(1).max(4096);
 var drivePullFileArgs = exports_external.object({
-  fileId: exports_external.string().min(1).max(2048).describe("Drive file ID or link."),
+  fileId: exports_external.string().min(1).max(2048).describe("Google Drive file ID or link, or a OneDrive, SharePoint or Teams file link or item id."),
+  driveId: exports_external.string().min(1).max(512).optional().describe("Microsoft 365 only: the driveId that came with the item id from a search or folder listing."),
+  provider: exports_external.enum(["google-workspace", "microsoft-365"]).optional().describe("Only needed for a Microsoft item id without driveId; links and driveId identify Microsoft 365 files."),
   path: workspacePath.optional().describe("Workspace path to save to. Defaults to drive/<file name>."),
-  format: exports_external.string().regex(/^[a-z]{2,5}$/).optional().describe("Docs, Sheets, Slides and Drawings only: xlsx, csv (first tab only), docx, md, txt, pptx, pdf, png or svg."),
+  format: exports_external.string().regex(/^[a-z]{2,5}$/).optional().describe("Docs, Sheets, Slides and Drawings: xlsx, csv (first tab only), docx, md, txt, pptx, pdf, png or svg. OneDrive and SharePoint: pdf converts an Office file."),
   connectionId,
   overwrite: exports_external.boolean().optional().describe("Replace a local copy even if it has edits not in Drive. Asks the person first.")
 }).strict();
@@ -318766,7 +319043,7 @@ var driveFileStatusArgs = exports_external.object({
 }).strict();
 var drivePushFileArgs = exports_external.object({
   path: workspacePath.describe("Workspace path of a pulled file."),
-  mode: exports_external.enum(["replace", "copy"]).optional().describe("replace (default for stored files) updates the same Drive file; copy saves a new file next to it."),
+  mode: exports_external.enum(["replace", "copy"]).optional().describe("replace (default for stored files) updates the same file; copy saves a new file next to it."),
   name: exports_external.string().min(1).max(255).optional().describe("Name for a copy.")
 }).strict();
 function isRecord41(value3) {
@@ -318781,7 +319058,7 @@ async function askPermission(context4, permission, patterns, metadata) {
 function createDriveFileTools(call) {
   return {
     drive_pull_file: {
-      description: "Save a Google Drive file into the workspace and return its path and revision, never its content. Use it to analyze or edit Office, PDF, CSV or any large file with shell tools. Docs, Sheets and Slides arrive as docx, xlsx and pptx unless format says otherwise.",
+      description: "Save a Google Drive, OneDrive or SharePoint file into the workspace and return its path and revision, never its content. Use it to analyze or edit Office, PDF, CSV or any large file with shell tools. Docs, Sheets and Slides arrive as docx, xlsx and pptx unless format says otherwise.",
       args: drivePullFileArgs.shape,
       async execute(rawArgs, context4) {
         const args2 = drivePullFileArgs.parse(rawArgs ?? {});
@@ -318791,14 +319068,14 @@ function createDriveFileTools(call) {
       }
     },
     drive_file_status: {
-      description: "For files pulled with drive_pull_file, report whether the local copy has edits not saved to Drive and whether the file changed in Drive since the pull.",
+      description: "For files pulled with drive_pull_file, report whether the local copy has edits not saved back and whether the file changed in Drive, OneDrive or SharePoint since the pull.",
       args: driveFileStatusArgs.shape,
       async execute(rawArgs, context4) {
         return JSON.stringify(await call("drive_file_status", driveFileStatusArgs.parse(rawArgs ?? {}), context4), null, 2);
       }
     },
     drive_push_file: {
-      description: "Save a pulled file back to Google Drive when the person asks. Asks the person first. Stored files are replaced in place as a new Drive version; Docs, Sheets and Slides are saved as a new Google file next to the original. Returns drive_conflict, and changes nothing, when someone changed the file in Drive since the pull: pull it again and reapply the edits, or save a copy.",
+      description: "Save a pulled file back to where it came from when the person asks. Asks the person first. Stored files, including Office files in OneDrive and SharePoint, are replaced in place as a new version; Google Docs, Sheets and Slides and PDF conversions are saved as a new file next to the original. Returns drive_conflict, and changes nothing, when someone changed the file since the pull: pull it again and reapply the edits, or save a copy.",
       args: drivePushFileArgs.shape,
       async execute(rawArgs, context4) {
         const args2 = drivePushFileArgs.parse(rawArgs ?? {});
@@ -323877,7 +324154,7 @@ import { mkdir as mkdir19, rename as rename13, rm as rm18, writeFile as writeFil
 import { join as join36 } from "node:path";
 // ../../constants.json
 var constants_default = {
-  opencodeVersion: "v1.18.30",
+  opencodeVersion: "v1.18.33",
   opencodeV2Version: "2.0.26"
 };
 
@@ -325254,7 +325531,7 @@ function createEngineV2Preview(options) {
 // package.json
 var package_default = {
   name: "openwork-server",
-  version: "0.18.61",
+  version: "0.18.62",
   description: "Filesystem-backed API for OpenWork remote clients",
   type: "module",
   bin: {
@@ -332809,7 +333086,7 @@ function readInstalledOpencodeVersion() {
 // package.json
 var package_default2 = {
   name: "openwork-server",
-  version: "0.18.61",
+  version: "0.18.62",
   description: "Filesystem-backed API for OpenWork remote clients",
   type: "module",
   bin: {
@@ -332900,7 +333177,7 @@ var package_default2 = {
 };
 // ../../constants.json
 var constants_default2 = {
-  opencodeVersion: "v1.18.30",
+  opencodeVersion: "v1.18.33",
   opencodeV2Version: "2.0.26"
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openwork-server",
-  "version": "0.18.61",
+  "version": "0.18.62",
   "description": "Filesystem-backed API for OpenWork remote clients",
   "type": "module",
   "bin": {

package/web/assets/{abnfDiagram-VCTEODGH-DGCabXot.js → abnfDiagram-VCTEODGH-DJzrT8Ql.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-SVP7TREG-CBKOSsQl.js";import{p as f}from"./chunk-JWPE2WC7-LslAnaQK.js";import{_ as n,l as o}from"./mermaid.core-DcgS6fFC.js";import{M as c,b as d}from"./cynefin-OW5HDTMX-BGWD-i0N.js";import"./app-Cy3sY2K8.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-SVP7TREG-B65ta9aQ.js";import{p as f}from"./chunk-JWPE2WC7-B34hvYk7.js";import{_ as n,l as o}from"./mermaid.core-FKm3Akes.js";import{M as c,b as d}from"./cynefin-OW5HDTMX-CAcz2tHt.js";import"./app-_2KkkZIM.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};