# dab

Cloudflare-native DAV service that gives each tessera user a private, opaque
host for WebDAV, CalDAV, and CardDAV.

## Overview

Every subject gets a five-word DNS label (e.g.
`river-copper-lantern-velvet-maple.dab.limic.dev`) and points real DAV clients
— Thunderbird, Apple Calendar, DAVx5 — at it. tessera owns identity. dab owns
DAV storage, Personal Access Tokens, protocol authorization, and subject-local
data.

The browser UI is a minimal control plane for occasional configuration visits
(minting PATs, creating collections, reviewing audit events), not a daily-use
workspace.

## Features

- WebDAV (RFC 4918), CalDAV (RFC 4791), CardDAV (RFC 6352)
- OIDC sign-in via tessera
- Personal Access Tokens for headless DAV clients
- Opaque per-subject hosts, fail-closed authorization
- Conservative blob garbage collection and storage repair
- Litmus and caldav-server-tester compatibility coverage

## Tech stack

- **Runtime** — Cloudflare Workers (TypeScript)
- **HTTP** — Hono
- **Frontend** — React 19, Vite, Tailwind 4
- **Data** — D1 (control plane), Durable Object SQLite (per-subject), R2 (file
  blobs), Queues (`BLOB_GC`, `REPAIR_JOBS`)
- **ORM** — Drizzle
- **Tests** — Vitest, litmus (WebDAV), caldav-server-tester (CalDAV)

## Repository layout

```
src/worker/      Cloudflare Worker entry, Hono app, DAV handlers, DO classes
src/client/      React SPA control-plane UI
drizzle/         Migrations for D1 and each DO SQLite
tests/           Vitest suites and protocol-compatibility harnesses
scripts/         litmus and caldav-server-tester runners
docs/            Operator and design docs
reference/       Local copies of relevant RFCs
vendor/          Pinned third-party assets
public/          Static assets served by Vite
```

## Documentation

- [`SPEC.md`](./SPEC.md) — product brief and original implementation intent
- [`PRODUCT.md`](./PRODUCT.md) — product positioning
- [`DESIGN.md`](./DESIGN.md) — UI and visual system
- [`AGENTS.md`](./AGENTS.md) — working agreements and product boundaries
- [`docs/operations.md`](./docs/operations.md) — resource setup, migrations,
  validation commands
- [`docs/frontend-spec.md`](./docs/frontend-spec.md) — React frontend
  architecture
- [`reference/`](./reference/) — local RFC copies for protocol resolution

## License

MIT. See [`LICENSE`](./LICENSE).