EIDEN-DRIVE — Eiden Group FileOS
Unified web app over Google Shared Drives (primary cloud) + Router-USB staging via Local Agent. One drive UI, safe-delete, full audit, encrypted vault, offline PWA.
Quick start
- Fill env at the end (
cp .env.example .env.local): Supabase, Google (client/secret/refresh/Shared Drive ID), AGENT_TOKEN, AGENT_WS_URL.
npm install && npm run dev → /drive (login at /login).- DB:
supabase db push (supabase/migrations/0001_init.sql + 0002_ai_vault.sql).
- Agent (office PC):
cd local-agent && npm i && node src/index.js — see local-agent/README.md. Mount \\192.168.1.1\share first.
- MCP: see
mcp-server/README.md + src/index.ts (AI add+view private only).
- Spec:
docs/00-index.md → 01…09.
What is implemented (P0–P2 code-complete, creds pending)
app/drive browser + filters (type/storage/search) + inspector + /drive/[id] preview/versions/timelineapp/activity|security|vault|users|storage full pages + widgets- APIs:
drive (merged index+Google), drive/trash (Recovery Bin 90d + approvals), drive/restore (manager+), drive/upload, drive/webhook, activity, vault/unlock (TOTP/WebAuthn stub → verify at the end, 6h session), users (manager-only tags), storage (80/95% alerts), agent (token heartbeat+jobs), notifications
- Lib:
roles, audit (IP/browser/OS + agent MAC), google-drive (list/trash/restore/share-expiry), vault (AES-GCM + 6h), alerts, files, offline (IndexedDB outbox + public/sw.js)
local-agent outbound-only indexer + allowlisted ops; mcp-server scoped tools
Structure
app/(auth|drive|drive/[id]|activity|security|vault|users|storage|api/...) Next.js 14 TS
components/drive|ui lib/ supabase/migrations/ local-agent/ mcp-server/
docs/00-09 design-system/Eiden-Drive/MASTER.md public/{logo.svg,manifest.json,sw.js}
Rules (enforced)
- USB never on internet; agent dials out (WSS/token). Members trash-only; permanent = dual-admin + approval on Finance/Legal/Contracts/HR. Vault create = Manager/Admin; view = fresh 2FA, 6h. Theme:
#122620/#0C5752/#CFC292/#FEFFF8 + Design.md tokens.
