Drive
The built-in document store: where people find it, the document classes, and how far agents may act.
On this page
TL;DR: Drive is core's shared document store, switched on by
files.documents.enabled in services/config/files.yaml. When it is off,
its pages answer 404.
Where
/drive: each signed-in person's documents, shared documents and recent ones. New document uses templates fromservices/documents/templates/./drive/{id}: one document, with presence, comments, proposals and history./admin/drive: folders and documents, with an Agent edits control per folder (directorpropose).
Classes
services/documents/classes.yaml sets how far an agent may act. A folder
carries a class and everything under it inherits it.
| Class | Attended agent | Unattended agent |
|---|---|---|
agent-workspace |
edit | edit |
internal |
edit | suggest |
confidential |
suggest | suggest |
restricted |
read | none |
New documents default to internal for people and agent-workspace for
agents.
Agent access
Agents reach Drive through the documents toolset on the systemprompt MCP
server. Each call is checked against the caller's own document grants.
Drive on GCS through the app is still open hardening work.