From 91dff122c4a97fa2bd346a83ac8ac7ee97f18c4a Mon Sep 17 00:00:00 2001
From: Hyko <punk.flag8609@fastmail.com>
Date: Wed, 15 Apr 2026 20:50:57 -0400
Subject: [PATCH] feat(storage): configure storage API with default access
 policies during initialization

---
 src/shared/lib/init.js | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/shared/lib/init.js b/src/shared/lib/init.js
index a610c3c..1aca82d 100644
--- a/src/shared/lib/init.js
+++ b/src/shared/lib/init.js
@@ -17,6 +17,7 @@
 import { configureRouter, registerFeatureRoutes, clearRouterConfig, clearFeatureRoutes } from '@zen/core/api';
 import { validateSession } from '../../features/auth/lib/session.js';
 import { routes as authRoutes } from '../../features/auth/api.js';
+import { configureStorageApi } from '@zen/core/storage';
 import { done, warn } from './logger.js';
 
 const ZEN_INIT_KEY = Symbol.for('__ZEN_INITIALIZED__');
@@ -36,6 +37,13 @@ export async function initializeZen() {
   configureRouter({ resolveSession: validateSession });
   registerFeatureRoutes(authRoutes);
 
+  configureStorageApi({
+    getPublicPrefixes: () => [],
+    getAccessPolicies: () => [
+      { prefix: 'users', type: 'owner' },
+    ],
+  });
+
   done('ZEN: ready');
 
   return {};