kruschdev/G-krusch

Google Drive RAG, Cloud-Synced agent.md Steering, Calendar & Gmail Extensions for AI Agents
Powers autonomous IDE agents (via MCP) and Krusch Companion 's <holodata> Agentic Proxy (via REST on :5446 ).
## 🧠 Why G-Krusch?
Most AI agents are trapped either in ephemeral context windows or isolated local folders that you can't easily access when away from your workstation. G-Krusch bridges the gap between humans, coding agents, and personal assistants (krusch-companion) across your Google Workspace:
1. agent.md Cloud-Synced Steering: Edit your agent rules, project priorities, and personas from your phone, tablet, or web browser directly in Google Drive. When an agent boots, it dynamically pulls the latest instructions via getagentsteering (GET /api/steering).
2. Sovereign 1,024-Dim Vector & FTS5 BM25 Drive RAG: Queries your Google Docs, PDFs, notes, and specs using a 3-tier dense semantic embedding cascade (Tier 1: local GPU Ollama snowflake-arctic-embed2:latest 8K-ctx 1,024-dim -> Tier 2: Gemini models/gemini-embedding-001 at outputDimensionality: 1024 -> Tier 3: uncached deterministic 64-dim offline fallback) fused with SQLite FTS5 Porter-stemmed BM25 keyword search.
3. 3-Tier Page-Faithful PDF Extraction: Validates %PDF- magic bytes prior to disk spooling (validatePdfMagicBytes) and extracts multi-page PDFs with page citations ([contract.pdf p.1]) via Tier 1 Krusch-Nexus (pdftotext -bbox-layout), Tier 2 system Poppler pdftotext, or Tier 3 pure-JS stream extraction (extractPdfTextNative).
4. Two-Way Agent Filesystem + Native Google Docs, Sheets & Slides: Agents can read project briefs from context/, check decision logs in memory/, and use writedrivefile to create or update Markdown files, styled Google Docs (.gdoc), Google Sheets (.gsheet from CSV or Markdown tables), and 16:9 Google Slides presentations (.slides from ----separated Markdown decks) directly in output/.
5. Google Calendar & Gmail Extensions: Exposes hardened REST endpoints (/api/calendar/events, /api/gmail/messages, /api/gmail/drafts, /api/gmail/send) so Krusch Companion can check your schedule, book appointments, search your inbox, and compose RFC-2822 / RFC-2047 emails.
## 📁 Workspace Structure in Google Drive
When G-Krusch connects to your Google Drive, it manages a dedicated workspace folder (defaults to G-Krusch):
Google Drive /
└── G-Krusch/
├── agent.md # Authoritative steering & invariants (edit anywhere)
├── context/ # Domain knowledge, architectural specs, SOPs
├── memory/ # Decisions, invariants, project logs
└── output/ # Agent-generated artifacts, reports, proposals
## 🛡️ Security & Concurrency Hardening
AES-256-GCM Encrypted Token Vault (src/lib/crypto.js & src/lib/db.js): OAuth 2.0 access and refresh tokens are encrypted at rest in SQLite WAL using AES-256-GCM with NIST SP 800-38D 12-byte (96-bit) IVs and 16-byte authentication tags (plus transparent legacy 16-byte IV decryption).
OAuth 2.0 CSRF State & CORS Origin Lockdown (src/lib/oauth.js & src/lib/auth-guard.js): Generates one-time 32-byte CSRF state tokens with constant-time validation on /auth/google/callback, and restricts browser CORS requests to trusted localhost, RFC1918 LAN, and Tailscale (100.64.0.0/10) origins.