[serge-ivo]

Summary

Adds a Zoho WorkDrive connector MVP alongside the Google Drive connector. Users can connect Zoho WorkDrive with readonly OAuth, paste a WorkDrive file URL/ID to import it, or paste a folder/team-folder URL/ID to list contents and import supported text-like files into instance Documents.

Impact

WorkDrive imports reuse the existing encrypted key vault and knowledge/vectorize path, so imported files become normal instance Documents without adding a new storage model.

Implementation notes

• Stores refresh tokens as provider zoho_workdrive in user_api_keys.
• Adds /v1/workdrive routes for OAuth, status, disconnect, folder listing, and import.
• Defaults to US Zoho endpoints but supports DC overrides via ZOHO_ACCOUNTS_BASE, ZOHO_WORKDRIVE_API_BASE, and ZOHO_WORKDRIVE_DOWNLOAD_BASE.
• Uses readonly scopes: aaaserver.profile.READ, WorkDrive.files.READ, and ZohoFiles.files.READ.

Validation

• pnpm --filter proagentstore-api typecheck
• pnpm --filter @proagentstore/console build
• pnpm exec vitest run workers/api/src/lib/workdrive.test.ts workers/api/src/lib/drive.test.ts --reporter=verbose
• git diff --check

Deployment

Set ZOHO_CLIENT_ID as a worker var and ZOHO_CLIENT_SECRET as a secret. Enable the relevant Zoho WorkDrive app/scopes in the Zoho API console, and set DC override vars if the account is not on the US Zoho DC.