@finueva/drive 0.11.0 → 0.13.0

package/dist/contract.d.ts

@@ -287,34 +287,793 @@ interface operations {
       };
     };
   };
+  listVisitorChildren: {
+    parameters: {
+      query?: {
+        itemId?: string;
+        after?: string;
+      };
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Current child page. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            items: {
+              itemId: string;
+              /** @enum {string} */
+              kind: "file" | "folder";
+              name: string | null;
+            }[];
+            nextAfter: string | null;
+          };
+        };
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  createVisitorDownload: {
+    parameters: {
+      query?: {
+        itemId?: string;
+      };
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Native managed download descriptor. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            expiresAtEpochMilliseconds: number;
+            headers: {
+              [key: string]: string;
+            };
+            /** @enum {string} */
+            method: "GET" | "HEAD";
+            /** @enum {string} */
+            mode: "presigned-single";
+            response: {
+              /** @enum {string} */
+              acceptRanges: "bytes";
+              byteLength: number;
+              contentDisposition: string;
+              contentLength: number;
+              contentRange: string | null;
+              contentType: string;
+              etag: string;
+              status: 200 | 206;
+              versionId: string;
+            };
+            /** Format: uri */
+            url: string;
+          };
+        };
+      };
+      /** @description Not modified. */
+      304: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Precondition failed. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Range unsatisfiable. */
+      416: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  readVisitorItem: {
+    parameters: {
+      query?: {
+        itemId?: string;
+      };
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Current descendant item. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string | null;
+            /** @enum {string} */
+            role: "viewer";
+            rootItemId: string;
+          };
+        };
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  redeemVisitorInvitation: {
+    parameters: {
+      query?: never;
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          sessionToken: string;
+        };
+      };
+    };
+    responses: {
+      /** @description Session bound to the invitation's exact email and scope. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            expiresAt: number;
+            grantId: string;
+            /** @enum {string} */
+            role: "viewer";
+          };
+        };
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   getCurrentWorkspace: {
     parameters: {
       query?: never;
       header?: never;
-      path?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The exact managed workspace and canonical root selected by the Drive credential. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            rootItemId: string;
+            rootVolumeId: string;
+            workspaceId: string;
+            workspaceReference: {
+              /** @enum {string} */
+              type: "personal";
+              userId: string;
+            } | {
+              organizationId: string;
+              /** @enum {string} */
+              type: "organization";
+            };
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Managed storage is disabled for the current workspace. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The selected Auth workspace is not provisioned or is not available to this User. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The request contains unsupported query input. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity authority, D1, or the canonical managed root is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  getCurrentWorkspaceSources: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description One canonical managed volume. Known providers are not connections or health evidence. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            /** @enum {boolean} */
+            externalConnectionsSupported: false;
+            knownProviders: ("managed" | "google-drive" | "onedrive" | "dropbox" | "s3-compatible")[];
+            volumes: {
+              /** @enum {string} */
+              name: "Files";
+              /** @enum {string} */
+              provider: "managed";
+              rootItemId: string;
+              volumeId: string;
+            }[];
+            workspace: {
+              rootItemId: string;
+              rootVolumeId: string;
+              workspaceId: string;
+              workspaceReference: {
+                /** @enum {string} */
+                type: "personal";
+                userId: string;
+              } | {
+                organizationId: string;
+                /** @enum {string} */
+                type: "organization";
+              };
+            };
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Managed storage is disabled. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The current workspace is not provisioned or accessible. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Unsupported query input. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity authority, D1, or canonical managed root is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  listWorkspaceItems: {
+    parameters: {
+      query?: {
+        view?: "recent" | "shared" | "trash";
+        kind?: "file" | "folder";
+        creatorUserId?: string;
+        limit?: number;
+        cursor?: string;
+      };
+      header?: never;
+      path: {
+        workspaceId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Authorized items and an authenticated continuation; no total count. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            items: {
+              createdAtEpochMilliseconds: number | null;
+              creatorUserId: string | null;
+              currentVersion: {
+                byteLength: number;
+                mediaType: string;
+                /** @enum {string} */
+                protectionClassification: "ordinary" | "opaque-encrypted";
+                /** @enum {string} */
+                state: "current";
+                versionId: string;
+              } | null;
+              etag: string;
+              itemId: string;
+              /** @enum {string} */
+              lifecycleState: "active" | "trashed";
+              modifiedAtEpochMilliseconds: number | null;
+              name: string;
+              parentId: string | null;
+              /** @enum {string} */
+              provider: "managed";
+              purgeAfterEpochMilliseconds: number | null;
+              revision: number;
+              trashedAtEpochMilliseconds: number | null;
+              /** @enum {string} */
+              type: "file" | "folder";
+              volumeId: string;
+              workspaceId: string;
+            }[];
+            nextCursor: string | null;
+          };
+        };
+      };
+      /** @description Authentication required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The action is not permitted. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Workspace not found. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The selected authority or page changed; restart the query. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Invalid request or cursor. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Authoritative state is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  getItem: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description The exact managed workspace and canonical root selected by the Drive credential. */
+      /** @description The active managed item and current published version metadata. */
       200: {
         headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            rootItemId: string;
-            rootVolumeId: string;
-            workspaceId: string;
-            workspaceReference: {
+            currentVersion: {
+              byteLength: number;
+              mediaType: string;
               /** @enum {string} */
-              type: "personal";
-              userId: string;
-            } | {
-              organizationId: string;
+              protectionClassification: "ordinary" | "opaque-encrypted";
               /** @enum {string} */
-              type: "organization";
-            };
+              state: "current";
+              versionId: string;
+            } | null;
+            itemId: string;
+            /** @enum {string} */
+            lifecycleState: "active";
+            name: string;
+            parentId: string | null;
+            revision: number;
+            /** @enum {string} */
+            type: "file" | "folder";
+            workspaceId: string;
           };
         };
       };
@@ -336,7 +1095,7 @@ interface operations {
           };
         };
       };
-      /** @description Managed storage is disabled for the current workspace. */
+      /** @description Managed storage is disabled for the discoverable item. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -354,7 +1113,7 @@ interface operations {
           };
         };
       };
-      /** @description The selected Auth workspace is not provisioned or is not available to this User. */
+      /** @description The item is absent, undiscoverable, tombstoned, or unpublished. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -372,7 +1131,25 @@ interface operations {
           };
         };
       };
-      /** @description The request contains unsupported query input. */
+      /** @description Authorization or metadata changed after preflight. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, or unexpected body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -390,7 +1167,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity authority, D1, or the canonical managed root is unavailable. */
+      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -419,47 +1196,64 @@ interface operations {
       };
     };
   };
-  getCurrentWorkspaceSources: {
+  deleteItem: {
     parameters: {
       query?: never;
-      header?: never;
-      path?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description One canonical managed volume. Known providers are not connections or health evidence. */
+      /** @description The retained deletion result was exactly replayed. */
       200: {
         headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            /** @enum {boolean} */
-            externalConnectionsSupported: false;
-            knownProviders: ("managed" | "google-drive" | "onedrive" | "dropbox" | "s3-compatible")[];
-            volumes: {
-              /** @enum {string} */
-              name: "Files";
-              /** @enum {string} */
-              provider: "managed";
-              rootItemId: string;
-              volumeId: string;
-            }[];
-            workspace: {
-              rootItemId: string;
-              rootVolumeId: string;
-              workspaceId: string;
-              workspaceReference: {
-                /** @enum {string} */
-                type: "personal";
-                userId: string;
-              } | {
-                organizationId: string;
-                /** @enum {string} */
-                type: "organization";
-              };
-            };
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description Deletion was retained and bounded reconciliation was attempted. */
+      202: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
           };
         };
       };
@@ -481,7 +1275,7 @@ interface operations {
           };
         };
       };
-      /** @description Managed storage is disabled. */
+      /** @description The discoverable item does not permit this lifecycle action. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -490,17 +1284,35 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "permission_denied";
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item or destination is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The requested action is not permitted.";
+              message: "The requested resource was not found.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The current workspace is not provisioned or accessible. */
-      404: {
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      409: {
         headers: {
           [name: string]: unknown;
         };
@@ -508,16 +1320,25 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "resource_not_found";
+              code: "idempotency_conflict";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The requested resource was not found.";
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
               requestId: string;
             };
           };
         };
       };
-      /** @description Unsupported query input. */
+      /** @description The path, query, headers, key, or strict body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -532,10 +1353,19 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
           };
         };
       };
-      /** @description Identity authority, D1, or canonical managed root is unavailable. */
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -564,64 +1394,52 @@ interface operations {
       };
     };
   };
-  listWorkspaceItems: {
+  updateItem: {
     parameters: {
-      query?: {
-        view?: "recent" | "shared" | "trash";
-        kind?: "file" | "folder";
-        creatorUserId?: string;
-        limit?: number;
-        cursor?: string;
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
       };
-      header?: never;
       path: {
         workspaceId: string;
+        itemId: string;
       };
       cookie?: never;
     };
-    requestBody?: never;
+    requestBody: {
+      content: {
+        "application/json": {
+          name: string;
+          parentItemId: string;
+        };
+      };
+    };
     responses: {
-      /** @description Authorized items and an authenticated continuation; no total count. */
+      /** @description The managed item was updated or exactly replayed. */
       200: {
         headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            items: {
-              createdAtEpochMilliseconds: number | null;
-              creatorUserId: string | null;
-              currentVersion: {
-                byteLength: number;
-                mediaType: string;
-                /** @enum {string} */
-                protectionClassification: "ordinary" | "opaque-encrypted";
-                /** @enum {string} */
-                state: "current";
-                versionId: string;
-              } | null;
-              etag: string;
-              itemId: string;
-              /** @enum {string} */
-              lifecycleState: "active" | "trashed";
-              modifiedAtEpochMilliseconds: number | null;
-              name: string;
-              parentId: string | null;
-              /** @enum {string} */
-              provider: "managed";
-              purgeAfterEpochMilliseconds: number | null;
-              revision: number;
-              trashedAtEpochMilliseconds: number | null;
-              /** @enum {string} */
-              type: "file" | "folder";
-              volumeId: string;
-              workspaceId: string;
-            }[];
-            nextCursor: string | null;
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
           };
         };
       };
-      /** @description Authentication required. */
+      /** @description A valid Drive user bearer credential is required. */
       401: {
         headers: {
           [name: string]: unknown;
@@ -630,15 +1448,16 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              code: "authentication_required";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "Authentication is required.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The action is not permitted. */
+      /** @description The discoverable item does not permit this lifecycle action. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -647,15 +1466,16 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              code: "permission_denied";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
               requestId: string;
             };
           };
         };
       };
-      /** @description Workspace not found. */
+      /** @description The item or destination is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -664,15 +1484,16 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              code: "resource_not_found";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The selected authority or page changed; restart the query. */
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -681,15 +1502,25 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              code: "idempotency_conflict";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
               requestId: string;
             };
           };
         };
       };
-      /** @description Invalid request or cursor. */
+      /** @description The path, query, headers, key, or strict body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -698,15 +1529,25 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              code: "invalid_request";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
               requestId: string;
             };
           };
         };
       };
-      /** @description Authoritative state is unavailable. */
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -715,9 +1556,19 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "authentication_required" | "identity_authority_unavailable" | "permission_denied" | "resource_not_found" | "invalid_request" | "invalid_pagination_cursor" | "precondition_failed" | "service_unavailable";
+              code: "identity_authority_unavailable";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
               requestId: string;
             };
           };
@@ -725,9 +1576,12 @@ interface operations {
       };
     };
   };
-  getItem: {
+  listFolderChildren: {
     parameters: {
-      query?: never;
+      query?: {
+        limit?: number;
+        cursor?: string;
+      };
       header?: never;
       path: {
         workspaceId: string;
@@ -737,33 +1591,30 @@ interface operations {
     };
     requestBody?: never;
     responses: {
-      /** @description The active managed item and current published version metadata. */
+      /** @description At most 50 active children in stable item-ID order. */
       200: {
         headers: {
-          /** @description Strong precondition for the next item mutation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            currentVersion: {
-              byteLength: number;
-              mediaType: string;
+            items: {
+              itemId: string;
               /** @enum {string} */
-              protectionClassification: "ordinary" | "opaque-encrypted";
+              kind: "file" | "folder";
+              /**
+               * Format: finueva-safe-filename
+               * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+               */
+              name: string;
+              parentItemId: string;
+              revision: number;
               /** @enum {string} */
-              state: "current";
-              versionId: string;
-            } | null;
-            itemId: string;
-            /** @enum {string} */
-            lifecycleState: "active";
-            name: string;
-            parentId: string | null;
-            revision: number;
-            /** @enum {string} */
-            type: "file" | "folder";
-            workspaceId: string;
+              visibility: "workspace" | "restricted";
+              volumeId: string;
+              workspaceId: string;
+            }[];
+            nextCursor: string | null;
           };
         };
       };
@@ -785,7 +1636,7 @@ interface operations {
           };
         };
       };
-      /** @description Managed storage is disabled for the discoverable item. */
+      /** @description Managed storage is disabled for the canonical workspace entitlement. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -803,7 +1654,7 @@ interface operations {
           };
         };
       };
-      /** @description The item is absent, undiscoverable, tombstoned, or unpublished. */
+      /** @description The parent is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -821,7 +1672,7 @@ interface operations {
           };
         };
       };
-      /** @description Authorization or metadata changed after preflight. */
+      /** @description Folder authority changed after preflight. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -839,7 +1690,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, or unexpected body is invalid. */
+      /** @description The path, query, or cursor is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -854,10 +1705,19 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_pagination_cursor";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The pagination cursor is invalid.";
+              requestId: string;
+            };
           };
         };
       };
-      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
+      /** @description Identity authority, D1, authorization evidence, or required cursor keys are unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -886,12 +1746,11 @@ interface operations {
       };
     };
   };
-  deleteItem: {
+  createFolder: {
     parameters: {
       query?: never;
       header: {
         "Idempotency-Key": string;
-        "If-Match": string;
       };
       path: {
         workspaceId: string;
@@ -899,13 +1758,21 @@ interface operations {
       };
       cookie?: never;
     };
-    requestBody?: never;
+    requestBody: {
+      content: {
+        "application/json": {
+          /**
+           * Format: finueva-safe-filename
+           * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+           */
+          name: string;
+        };
+      };
+    };
     responses: {
-      /** @description The retained deletion result was exactly replayed. */
+      /** @description The exact committed folder is replayed. */
       200: {
         headers: {
-          /** @description Strong precondition for the next item mutation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
@@ -913,22 +1780,23 @@ interface operations {
             itemId: string;
             /** @enum {string} */
             kind: "file" | "folder";
+            /**
+             * Format: finueva-safe-filename
+             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+             */
             name: string;
             parentItemId: string;
-            purgeAfterEpochMilliseconds: number | null;
             revision: number;
             /** @enum {string} */
-            state: "active" | "trashed" | "deleting";
+            visibility: "workspace" | "restricted";
             volumeId: string;
             workspaceId: string;
           };
         };
       };
-      /** @description Deletion was retained and bounded reconciliation was attempted. */
-      202: {
+      /** @description The folder is committed. */
+      201: {
         headers: {
-          /** @description Strong precondition for the next item mutation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
@@ -936,12 +1804,15 @@ interface operations {
             itemId: string;
             /** @enum {string} */
             kind: "file" | "folder";
+            /**
+             * Format: finueva-safe-filename
+             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+             */
             name: string;
             parentItemId: string;
-            purgeAfterEpochMilliseconds: number | null;
             revision: number;
             /** @enum {string} */
-            state: "active" | "trashed" | "deleting";
+            visibility: "workspace" | "restricted";
             volumeId: string;
             workspaceId: string;
           };
@@ -965,7 +1836,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this lifecycle action. */
+      /** @description The discoverable parent does not permit folder creation. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -983,7 +1854,7 @@ interface operations {
           };
         };
       };
-      /** @description The item or destination is absent or undiscoverable. */
+      /** @description The parent is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1001,7 +1872,7 @@ interface operations {
           };
         };
       };
-      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      /** @description The idempotency key conflicts or folder authority changed after preflight. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -1028,7 +1899,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, headers, key, or strict body is invalid. */
+      /** @description The path, idempotency key, body, or name is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1055,7 +1926,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      /** @description Identity authority, D1, authorization evidence, or trusted capacity evidence is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1084,12 +1955,18 @@ interface operations {
       };
     };
   };
-  updateItem: {
+  createDownload: {
     parameters: {
-      query?: never;
+      query?: {
+        versionId?: string;
+      };
       header: {
         "Idempotency-Key": string;
-        "If-Match": string;
+        "Download-Method"?: string;
+        Range?: string;
+        "If-Match"?: string;
+        "If-None-Match"?: string;
+        "If-Range"?: string;
       };
       path: {
         workspaceId: string;
@@ -1097,38 +1974,64 @@ interface operations {
       };
       cookie?: never;
     };
-    requestBody: {
-      content: {
-        "application/json": {
-          name: string;
-          parentItemId: string;
-        };
-      };
-    };
+    requestBody?: never;
     responses: {
-      /** @description The managed item was updated or exactly replayed. */
+      /** @description A short-lived immutable archive capability. */
       200: {
         headers: {
-          /** @description Strong precondition for the next item mutation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            itemId: string;
+            expiresAtEpochMilliseconds: number;
+            headers: {
+              [key: string]: string;
+            };
             /** @enum {string} */
-            kind: "file" | "folder";
-            name: string;
-            parentItemId: string;
-            purgeAfterEpochMilliseconds: number | null;
-            revision: number;
+            method: "GET" | "HEAD";
             /** @enum {string} */
-            state: "active" | "trashed" | "deleting";
-            volumeId: string;
-            workspaceId: string;
+            mode: "presigned-single";
+            response: {
+              /** @enum {string} */
+              acceptRanges: "bytes";
+              byteLength: number;
+              contentDisposition: string;
+              contentLength: number;
+              contentRange: string | null;
+              contentType: string;
+              etag: string;
+              status: 200 | 206;
+              versionId: string;
+            };
+            /** Format: uri */
+            url: string;
+          };
+        };
+      };
+      /** @description One idempotent cold archive retrieval operation. */
+      202: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            /** @enum {string} */
+            mode: "restore-pending";
+            operationId: string;
+            pollAfterSeconds: number;
+            /** @enum {string} */
+            state: "pending" | "restoring";
+            versionId: string;
           };
         };
       };
+      /** @description The selected immutable representation is not modified. */
+      304: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description A valid Drive user bearer credential is required. */
       401: {
         headers: {
@@ -1140,14 +2043,13 @@ interface operations {
               /** @enum {string} */
               code: "authentication_required";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is required.";
+              message: string;
               requestId: string;
             };
           };
         };
       };
-      /** @description The discoverable item does not permit this lifecycle action. */
+      /** @description The visible file cannot be downloaded under current authority. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1158,14 +2060,13 @@ interface operations {
               /** @enum {string} */
               code: "permission_denied";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested action is not permitted.";
+              message: string;
               requestId: string;
             };
           };
         };
       };
-      /** @description The item or destination is absent or undiscoverable. */
+      /** @description The file or selected version is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1176,14 +2077,13 @@ interface operations {
               /** @enum {string} */
               code: "resource_not_found";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested resource was not found.";
+              message: string;
               requestId: string;
             };
           };
         };
       };
-      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      /** @description The retrieval key conflicts or immutable authority changed after preflight. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -1194,8 +2094,7 @@ interface operations {
               /** @enum {string} */
               code: "idempotency_conflict";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
+              message: string;
               requestId: string;
             };
           } | {
@@ -1203,15 +2102,14 @@ interface operations {
               /** @enum {string} */
               code: "precondition_failed";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request precondition failed.";
+              message: string;
               requestId: string;
             };
           };
         };
       };
-      /** @description The path, query, headers, key, or strict body is invalid. */
-      422: {
+      /** @description A content entity-tag precondition failed. */
+      412: {
         headers: {
           [name: string]: unknown;
         };
@@ -1219,19 +2117,43 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "invalid_request";
+              code: "precondition_failed";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request is invalid.";
+              message: string;
               requestId: string;
             };
-          } | {
+          };
+        };
+      };
+      /** @description The valid single range does not overlap the representation. */
+      416: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
             error: {
               /** @enum {string} */
-              code: "invalid_idempotency_key";
+              code: "range_not_satisfiable";
               details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, or unexpected body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
               /** @enum {string} */
-              message: "The idempotency key is invalid.";
+              code: "invalid_request";
+              details: Record<string, never>;
+              message: string;
               requestId: string;
             };
           };
@@ -1248,8 +2170,7 @@ interface operations {
               /** @enum {string} */
               code: "identity_authority_unavailable";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is temporarily unavailable.";
+              message: string;
               requestId: string;
             };
           } | {
@@ -1257,8 +2178,7 @@ interface operations {
               /** @enum {string} */
               code: "service_unavailable";
               details: Record<string, never>;
-              /** @enum {string} */
-              message: "The service is temporarily unavailable.";
+              message: string;
               requestId: string;
             };
           };
@@ -1266,7 +2186,7 @@ interface operations {
       };
     };
   };
-  listFolderChildren: {
+  listItemPermissions: {
     parameters: {
       query?: {
         limit?: number;
@@ -1281,28 +2201,39 @@ interface operations {
     };
     requestBody?: never;
     responses: {
-      /** @description At most 50 active children in stable item-ID order. */
+      /** @description A stable permission page. */
       200: {
         headers: {
+          /** @description Current direct collection precondition for POST on this item. */
+          "Drive-Permission-Collection-ETag"?: string;
+          /** @description Strong validator for the exact returned permission-list representation. */
+          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
+            collectionEtag: string;
+            collectionRevision: number;
             items: {
-              itemId: string;
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
               /** @enum {string} */
-              kind: "file" | "folder";
-              /**
-               * Format: finueva-safe-filename
-               * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
-               */
-              name: string;
-              parentItemId: string;
+              availability: "active" | "expired" | "revoked";
+              etag: string;
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
               revision: number;
               /** @enum {string} */
-              visibility: "workspace" | "restricted";
-              volumeId: string;
-              workspaceId: string;
+              source: "direct" | "inherited";
+              sourceItemId: string;
             }[];
             nextCursor: string | null;
           };
@@ -1326,7 +2257,7 @@ interface operations {
           };
         };
       };
-      /** @description Managed storage is disabled for the canonical workspace entitlement. */
+      /** @description The discoverable item does not permit this permission operation. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1344,7 +2275,7 @@ interface operations {
           };
         };
       };
-      /** @description The parent is absent or undiscoverable. */
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1362,8 +2293,8 @@ interface operations {
           };
         };
       };
-      /** @description Folder authority changed after preflight. */
-      409: {
+      /** @description The supplied revision or post-preflight authority is stale. */
+      412: {
         headers: {
           [name: string]: unknown;
         };
@@ -1380,7 +2311,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, or cursor is invalid. */
+      /** @description The path, query, headers, or pagination cursor are invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1407,7 +2338,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity authority, D1, authorization evidence, or required cursor keys are unavailable. */
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1436,11 +2367,12 @@ interface operations {
       };
     };
   };
-  createFolder: {
+  createItemPermission: {
     parameters: {
       query?: never;
       header: {
         "Idempotency-Key": string;
+        "If-Match": string;
       };
       path: {
         workspaceId: string;
@@ -1451,60 +2383,92 @@ interface operations {
     requestBody: {
       content: {
         "application/json": {
-          /**
-           * Format: finueva-safe-filename
-           * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
-           */
-          name: string;
+          actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+          expiresAtEpochMilliseconds: number | null;
+          grantee: {
+            /** @enum {string} */
+            type: "user";
+            userId: string;
+          } | {
+            teamId: string;
+            /** @enum {string} */
+            type: "team";
+          };
         };
       };
     };
     responses: {
-      /** @description The exact committed folder is replayed. */
+      /** @description The exact committed result was replayed. */
       200: {
         headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            itemId: string;
-            /** @enum {string} */
-            kind: "file" | "folder";
-            /**
-             * Format: finueva-safe-filename
-             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
-             */
-            name: string;
-            parentItemId: string;
-            revision: number;
+          /** @description Current direct collection precondition for the next POST. */
+          "Drive-Permission-Collection-ETag"?: string;
+          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
+          "Drive-Permission-Grant-ETag"?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            collectionRevision: number;
+            grant: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct";
+              sourceItemId: string;
+            };
             /** @enum {string} */
-            visibility: "workspace" | "restricted";
-            volumeId: string;
-            workspaceId: string;
+            outcome: "committed" | "replayed";
           };
         };
       };
-      /** @description The folder is committed. */
+      /** @description The direct grant was committed. */
       201: {
         headers: {
+          /** @description Current direct collection precondition for the next POST. */
+          "Drive-Permission-Collection-ETag"?: string;
+          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
+          "Drive-Permission-Grant-ETag"?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            itemId: string;
-            /** @enum {string} */
-            kind: "file" | "folder";
-            /**
-             * Format: finueva-safe-filename
-             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
-             */
-            name: string;
-            parentItemId: string;
-            revision: number;
+            collectionRevision: number;
+            grant: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct";
+              sourceItemId: string;
+            };
             /** @enum {string} */
-            visibility: "workspace" | "restricted";
-            volumeId: string;
-            workspaceId: string;
+            outcome: "committed" | "replayed";
           };
         };
       };
@@ -1526,7 +2490,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable parent does not permit folder creation. */
+      /** @description The discoverable item does not permit this permission operation. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1544,7 +2508,7 @@ interface operations {
           };
         };
       };
-      /** @description The parent is absent or undiscoverable. */
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1562,7 +2526,7 @@ interface operations {
           };
         };
       };
-      /** @description The idempotency key conflicts or folder authority changed after preflight. */
+      /** @description The idempotency key was reused for a different semantic request. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -1577,7 +2541,16 @@ interface operations {
               message: "The idempotency key conflicts with an earlier request.";
               requestId: string;
             };
-          } | {
+          };
+        };
+      };
+      /** @description The supplied revision or post-preflight authority is stale. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
             error: {
               /** @enum {string} */
               code: "precondition_failed";
@@ -1589,7 +2562,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, idempotency key, body, or name is invalid. */
+      /** @description The path, query, headers, idempotency key, or body are invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1616,7 +2589,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity authority, D1, authorization evidence, or trusted capacity evidence is unavailable. */
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1645,19 +2618,10 @@ interface operations {
       };
     };
   };
-  createDownload: {
+  readEffectiveItemPermissions: {
     parameters: {
-      query?: {
-        versionId?: string;
-      };
-      header: {
-        "Idempotency-Key": string;
-        "Download-Method"?: string;
-        Range?: string;
-        "If-Match"?: string;
-        "If-None-Match"?: string;
-        "If-Range"?: string;
-      };
+      query?: never;
+      header?: never;
       path: {
         workspaceId: string;
         itemId: string;
@@ -1666,62 +2630,25 @@ interface operations {
     };
     requestBody?: never;
     responses: {
-      /** @description A short-lived immutable archive capability. */
+      /** @description All seven caller-specific item actions. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            expiresAtEpochMilliseconds: number;
-            headers: {
-              [key: string]: string;
-            };
-            /** @enum {string} */
-            method: "GET" | "HEAD";
-            /** @enum {string} */
-            mode: "presigned-single";
-            response: {
+            actions: {
               /** @enum {string} */
-              acceptRanges: "bytes";
-              byteLength: number;
-              contentDisposition: string;
-              contentLength: number;
-              contentRange: string | null;
-              contentType: string;
-              etag: string;
-              status: 200 | 206;
-              versionId: string;
-            };
-            /** Format: uri */
-            url: string;
-          };
-        };
-      };
-      /** @description One idempotent cold archive retrieval operation. */
-      202: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            /** @enum {string} */
-            mode: "restore-pending";
-            operationId: string;
-            pollAfterSeconds: number;
-            /** @enum {string} */
-            state: "pending" | "restoring";
-            versionId: string;
+              action: "items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:manage" | "items:permissions:read" | "items:update";
+              allowed: boolean;
+              /** @enum {string|null} */
+              basis: "workspace_visibility" | "restricted_administrator_bypass" | "direct_grant" | "inherited_grant" | null;
+              grantId: string | null;
+              sourceItemId: string | null;
+            }[] & (unknown & unknown & unknown & unknown & unknown & unknown & unknown);
           };
         };
       };
-      /** @description The selected immutable representation is not modified. */
-      304: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
       /** @description A valid Drive user bearer credential is required. */
       401: {
         headers: {
@@ -1733,13 +2660,14 @@ interface operations {
               /** @enum {string} */
               code: "authentication_required";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "Authentication is required.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The visible file cannot be downloaded under current authority. */
+      /** @description The discoverable item does not permit this permission operation. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1750,13 +2678,14 @@ interface operations {
               /** @enum {string} */
               code: "permission_denied";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The file or selected version is absent or undiscoverable. */
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1767,38 +2696,14 @@ interface operations {
               /** @enum {string} */
               code: "resource_not_found";
               details: Record<string, never>;
-              message: string;
-              requestId: string;
-            };
-          };
-        };
-      };
-      /** @description The retrieval key conflicts or immutable authority changed after preflight. */
-      409: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "idempotency_conflict";
-              details: Record<string, never>;
-              message: string;
-              requestId: string;
-            };
-          } | {
-            error: {
               /** @enum {string} */
-              code: "precondition_failed";
-              details: Record<string, never>;
-              message: string;
+              message: "The requested resource was not found.";
               requestId: string;
             };
           };
         };
       };
-      /** @description A content entity-tag precondition failed. */
+      /** @description The supplied revision or post-preflight authority is stale. */
       412: {
         headers: {
           [name: string]: unknown;
@@ -1809,30 +2714,14 @@ interface operations {
               /** @enum {string} */
               code: "precondition_failed";
               details: Record<string, never>;
-              message: string;
-              requestId: string;
-            };
-          };
-        };
-      };
-      /** @description The valid single range does not overlap the representation. */
-      416: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            error: {
               /** @enum {string} */
-              code: "range_not_satisfiable";
-              details: Record<string, never>;
-              message: string;
+              message: "The request precondition failed.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The path, query, headers, or unexpected body is invalid. */
+      /** @description The path, query, headers, or body are invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1843,13 +2732,14 @@ interface operations {
               /** @enum {string} */
               code: "invalid_request";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "The request is invalid.";
               requestId: string;
             };
           };
         };
       };
-      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1860,7 +2750,8 @@ interface operations {
               /** @enum {string} */
               code: "identity_authority_unavailable";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
               requestId: string;
             };
           } | {
@@ -1868,7 +2759,8 @@ interface operations {
               /** @enum {string} */
               code: "service_unavailable";
               details: Record<string, never>;
-              message: string;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
               requestId: string;
             };
           };
@@ -1876,39 +2768,36 @@ interface operations {
       };
     };
   };
-  listItemPermissions: {
+  revokeItemPermission: {
     parameters: {
-      query?: {
-        limit?: number;
-        cursor?: string;
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
       };
-      header?: never;
       path: {
         workspaceId: string;
         itemId: string;
+        grantId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description A stable permission page. */
+      /** @description The retained revoked grant was committed, replayed, or unchanged. */
       200: {
         headers: {
-          /** @description Current direct collection precondition for POST on this item. */
+          /** @description Current direct collection precondition for POST. */
           "Drive-Permission-Collection-ETag"?: string;
-          /** @description Strong validator for the exact returned permission-list representation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            collectionEtag: string;
             collectionRevision: number;
-            items: {
+            grant: {
               actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
               /** @enum {string} */
               availability: "active" | "expired" | "revoked";
-              etag: string;
               expiresAtEpochMilliseconds: number | null;
               grantId: string;
               grantee: {
@@ -1922,10 +2811,11 @@ interface operations {
               };
               revision: number;
               /** @enum {string} */
-              source: "direct" | "inherited";
+              source: "direct";
               sourceItemId: string;
-            }[];
-            nextCursor: string | null;
+            };
+            /** @enum {string} */
+            outcome: "committed" | "replayed";
           };
         };
       };
@@ -1983,6 +2873,24 @@ interface operations {
           };
         };
       };
+      /** @description The idempotency key was reused for a different semantic request. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          };
+        };
+      };
       /** @description The supplied revision or post-preflight authority is stale. */
       412: {
         headers: {
@@ -2001,7 +2909,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, headers, or pagination cursor are invalid. */
+      /** @description The path, query, headers, idempotency key, or body are invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -2019,10 +2927,10 @@ interface operations {
           } | {
             error: {
               /** @enum {string} */
-              code: "invalid_pagination_cursor";
+              code: "invalid_idempotency_key";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The pagination cursor is invalid.";
+              message: "The idempotency key is invalid.";
               requestId: string;
             };
           };
@@ -2057,7 +2965,7 @@ interface operations {
       };
     };
   };
-  createItemPermission: {
+  updateItemPermission: {
     parameters: {
       query?: never;
       header: {
@@ -2067,70 +2975,25 @@ interface operations {
       path: {
         workspaceId: string;
         itemId: string;
+        grantId: string;
       };
       cookie?: never;
     };
     requestBody: {
       content: {
         "application/json": {
-          actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-          expiresAtEpochMilliseconds: number | null;
-          grantee: {
-            /** @enum {string} */
-            type: "user";
-            userId: string;
-          } | {
-            teamId: string;
-            /** @enum {string} */
-            type: "team";
-          };
+          actions?: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+          expiresAtEpochMilliseconds?: number | null;
         };
       };
     };
     responses: {
-      /** @description The exact committed result was replayed. */
+      /** @description The direct grant was committed or replayed. */
       200: {
         headers: {
-          /** @description Current direct collection precondition for the next POST. */
-          "Drive-Permission-Collection-ETag"?: string;
-          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
-          "Drive-Permission-Grant-ETag"?: string;
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            collectionRevision: number;
-            grant: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
-              revision: number;
-              /** @enum {string} */
-              source: "direct";
-              sourceItemId: string;
-            };
-            /** @enum {string} */
-            outcome: "committed" | "replayed";
-          };
-        };
-      };
-      /** @description The direct grant was committed. */
-      201: {
-        headers: {
-          /** @description Current direct collection precondition for the next POST. */
+          /** @description Current direct collection precondition for POST. */
           "Drive-Permission-Collection-ETag"?: string;
-          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
+          /** @description Current direct-grant precondition for the next PATCH or DELETE; omitted when the current row is not mutable. */
           "Drive-Permission-Grant-ETag"?: string;
           [name: string]: unknown;
         };
@@ -2308,10 +3171,13 @@ interface operations {
       };
     };
   };
-  readEffectiveItemPermissions: {
+  restoreItem: {
     parameters: {
       query?: never;
-      header?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
       path: {
         workspaceId: string;
         itemId: string;
@@ -2320,22 +3186,26 @@ interface operations {
     };
     requestBody?: never;
     responses: {
-      /** @description All seven caller-specific item actions. */
+      /** @description The managed item was restored or exactly replayed. */
       200: {
         headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            actions: {
-              /** @enum {string} */
-              action: "items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:manage" | "items:permissions:read" | "items:update";
-              allowed: boolean;
-              /** @enum {string|null} */
-              basis: "workspace_visibility" | "restricted_administrator_bypass" | "direct_grant" | "inherited_grant" | null;
-              grantId: string | null;
-              sourceItemId: string | null;
-            }[] & (unknown & unknown & unknown & unknown & unknown & unknown & unknown);
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
           };
         };
       };
@@ -2357,7 +3227,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description The discoverable item does not permit this lifecycle action. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -2375,7 +3245,7 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The item or destination is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -2393,13 +3263,22 @@ interface operations {
           };
         };
       };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      409: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
             error: {
               /** @enum {string} */
               code: "precondition_failed";
@@ -2411,7 +3290,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, headers, or body are invalid. */
+      /** @description The path, query, headers, key, or strict body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -2426,10 +3305,19 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
           };
         };
       };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -2458,7 +3346,7 @@ interface operations {
       };
     };
   };
-  revokeItemPermission: {
+  registerItemRecipient: {
     parameters: {
       query?: never;
       header: {
@@ -2468,17 +3356,58 @@ interface operations {
       path: {
         workspaceId: string;
         itemId: string;
-        grantId: string;
       };
       cookie?: never;
     };
-    requestBody?: never;
+    requestBody: {
+      content: {
+        "application/json": {
+          /** @description Normalized email, at most 320 UTF-8 bytes. */
+          email: string;
+          /** @description Require the freshly resolved Auth user ID to match before creating a grant. A mismatch returns registration_conflict without mutation. */
+          expectedRecipientUserId?: string;
+          /** @enum {string} */
+          role: "viewer" | "editor";
+        };
+      };
+    };
     responses: {
-      /** @description The retained revoked grant was committed, replayed, or unchanged. */
+      /** @description Exact grant replay. */
       200: {
         headers: {
-          /** @description Current direct collection precondition for POST. */
-          "Drive-Permission-Collection-ETag"?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            collectionRevision: number;
+            grant: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct";
+              sourceItemId: string;
+            };
+            /** @enum {string} */
+            outcome: "committed" | "replayed";
+          };
+        };
+      };
+      /** @description Registered recipient grant created. */
+      201: {
+        headers: {
           [name: string]: unknown;
         };
         content: {
@@ -2545,25 +3474,14 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The item or registered recipient is unavailable. */
       404: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "resource_not_found";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested resource was not found.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The idempotency key was reused for a different semantic request. */
+      /** @description Idempotency conflict or registration_conflict: the resolved recipient does not match the expected user. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -2578,6 +3496,15 @@ interface operations {
               message: "The idempotency key conflicts with an earlier request.";
               requestId: string;
             };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "registration_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The recipient could not be confirmed.";
+              requestId: string;
+            };
           };
         };
       };
@@ -2626,6 +3553,13 @@ interface operations {
           };
         };
       };
+      /** @description Recipient resolution rate limit exceeded. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
       503: {
         headers: {
@@ -2655,45 +3589,35 @@ interface operations {
       };
     };
   };
-  updateItemPermission: {
+  listItemSharingPeople: {
     parameters: {
-      query?: never;
-      header: {
-        "Idempotency-Key": string;
-        "If-Match": string;
+      query?: {
+        limit?: number;
+        cursor?: string;
       };
+      header?: never;
       path: {
         workspaceId: string;
         itemId: string;
-        grantId: string;
       };
       cookie?: never;
     };
-    requestBody: {
-      content: {
-        "application/json": {
-          actions?: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-          expiresAtEpochMilliseconds?: number | null;
-        };
-      };
-    };
+    requestBody?: never;
     responses: {
-      /** @description The direct grant was committed or replayed. */
+      /** @description Canonical grant page; unavailable display is null and never authority. */
       200: {
         headers: {
-          /** @description Current direct collection precondition for POST. */
-          "Drive-Permission-Collection-ETag"?: string;
-          /** @description Current direct-grant precondition for the next PATCH or DELETE; omitted when the current row is not mutable. */
-          "Drive-Permission-Grant-ETag"?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
+            collectionEtag: string;
             collectionRevision: number;
-            grant: {
+            items: ({
               actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
               /** @enum {string} */
               availability: "active" | "expired" | "revoked";
+              etag: string;
               expiresAtEpochMilliseconds: number | null;
               grantId: string;
               grantee: {
@@ -2707,11 +3631,20 @@ interface operations {
               };
               revision: number;
               /** @enum {string} */
-              source: "direct";
+              source: "direct" | "inherited";
               sourceItemId: string;
-            };
-            /** @enum {string} */
-            outcome: "committed" | "replayed";
+            } & {
+              recipient: {
+                /** @description At most 320 UTF-8 bytes. */
+                email: string;
+                expiresAt: number;
+                /** @description At most 1024 UTF-8 bytes. */
+                name: string;
+                resolvedAt: number;
+                userId: string;
+              } | null;
+            })[];
+            nextCursor: string | null;
           };
         };
       };
@@ -2751,23 +3684,12 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The item or registered recipient is unavailable. */
       404: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "resource_not_found";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested resource was not found.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
       /** @description The idempotency key was reused for a different semantic request. */
       409: {
@@ -2832,6 +3754,13 @@ interface operations {
           };
         };
       };
+      /** @description Recipient resolution rate limit exceeded. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
       /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
       503: {
         headers: {
@@ -2861,7 +3790,7 @@ interface operations {
       };
     };
   };
-  restoreItem: {
+  trashItem: {
     parameters: {
       query?: never;
       header: {
@@ -2876,7 +3805,7 @@ interface operations {
     };
     requestBody?: never;
     responses: {
-      /** @description The managed item was restored or exactly replayed. */
+      /** @description The managed item was trashed or exactly replayed. */
       200: {
         headers: {
           /** @description Strong precondition for the next item mutation. */
@@ -3036,93 +3965,47 @@ interface operations {
       };
     };
   };
-  registerItemRecipient: {
+  listItemVersions: {
     parameters: {
-      query?: never;
-      header: {
-        "Idempotency-Key": string;
-        "If-Match": string;
+      query?: {
+        limit?: number;
+        cursor?: string;
       };
+      header?: never;
       path: {
         workspaceId: string;
         itemId: string;
       };
       cookie?: never;
     };
-    requestBody: {
-      content: {
-        "application/json": {
-          /** @description Normalized email, at most 320 UTF-8 bytes. */
-          email: string;
-          /** @enum {string} */
-          role: "viewer" | "editor";
-        };
-      };
-    };
+    requestBody?: never;
     responses: {
-      /** @description Exact grant replay. */
+      /** @description At most 50 versions in version-ID order with an opaque 15-minute continuation cursor. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            collectionRevision: number;
-            grant: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
-              revision: number;
+            items: {
               /** @enum {string} */
-              source: "direct";
-              sourceItemId: string;
-            };
-            /** @enum {string} */
-            outcome: "committed" | "replayed";
-          };
-        };
-      };
-      /** @description Registered recipient grant created. */
-      201: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            collectionRevision: number;
-            grant: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              archiveState: "available" | "cold" | "restoring" | "unavailable" | "corrupt";
+              byteLength: number;
+              contentDigest: string;
+              /**
+               * Format: finueva-safe-filename
+               * @description Custom format finueva-safe-filename requires NFC normalization and at most 255 UTF-8 bytes in addition to the structural pattern and maxLength constraints. Dot entries and Windows reserved base names are forbidden. Generated JSON Schema constraints are a necessary structural subset and do not independently enforce normalization or UTF-8 byte length.
+               */
+              displayFilename: string;
+              mediaType: string;
               /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
+              protectionClassification: "ordinary" | "opaque-encrypted";
               revision: number;
               /** @enum {string} */
-              source: "direct";
-              sourceItemId: string;
-            };
-            /** @enum {string} */
-            outcome: "committed" | "replayed";
+              state: "current" | "superseded";
+              versionId: string;
+            }[];
+            nextCursor: string | null;
           };
         };
       };
@@ -3144,7 +4027,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description The discoverable item does not permit metadata reads. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -3162,15 +4045,8 @@ interface operations {
           };
         };
       };
-      /** @description The item or registered recipient is unavailable. */
+      /** @description The file is absent or undiscoverable. */
       404: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-      /** @description The idempotency key was reused for a different semantic request. */
-      409: {
         headers: {
           [name: string]: unknown;
         };
@@ -3178,17 +4054,17 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "idempotency_conflict";
+              code: "resource_not_found";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
+              message: "The requested resource was not found.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
+      /** @description Authorization changed after preflight. */
+      409: {
         headers: {
           [name: string]: unknown;
         };
@@ -3205,7 +4081,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      /** @description The path, query, duplicate query key, or unexpected body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -3220,26 +4096,10 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "invalid_idempotency_key";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key is invalid.";
-              requestId: string;
-            };
           };
         };
       };
-      /** @description Recipient resolution rate limit exceeded. */
-      429: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity, D1, or authorization authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -3268,62 +4128,44 @@ interface operations {
       };
     };
   };
-  listItemSharingPeople: {
+  getItemVersion: {
     parameters: {
-      query?: {
-        limit?: number;
-        cursor?: string;
-      };
+      query?: never;
       header?: never;
       path: {
         workspaceId: string;
         itemId: string;
+        versionId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description Canonical grant page; unavailable display is null and never authority. */
+      /** @description The exact workspace/item-bound immutable managed file version. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            collectionEtag: string;
-            collectionRevision: number;
-            items: ({
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              etag: string;
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
-              revision: number;
-              /** @enum {string} */
-              source: "direct" | "inherited";
-              sourceItemId: string;
-            } & {
-              recipient: {
-                /** @description At most 320 UTF-8 bytes. */
-                email: string;
-                expiresAt: number;
-                /** @description At most 1024 UTF-8 bytes. */
-                name: string;
-                resolvedAt: number;
-                userId: string;
-              } | null;
-            })[];
-            nextCursor: string | null;
+            /** @enum {string} */
+            archiveState: "available" | "cold" | "restoring" | "unavailable" | "corrupt";
+            byteLength: number;
+            contentDigest: string;
+            /**
+             * Format: finueva-safe-filename
+             * @description Custom format finueva-safe-filename requires NFC normalization and at most 255 UTF-8 bytes in addition to the structural pattern and maxLength constraints. Dot entries and Windows reserved base names are forbidden. Generated JSON Schema constraints are a necessary structural subset and do not independently enforce normalization or UTF-8 byte length.
+             */
+            displayFilename: string;
+            itemId: string;
+            mediaType: string;
+            /** @enum {string} */
+            protectionClassification: "ordinary" | "opaque-encrypted";
+            revision: number;
+            /** @enum {string} */
+            state: "current" | "superseded";
+            versionId: string;
+            workspaceId: string;
           };
         };
       };
@@ -3345,7 +4187,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description Managed storage is disabled for the discoverable file. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -3363,15 +4205,8 @@ interface operations {
           };
         };
       };
-      /** @description The item or registered recipient is unavailable. */
+      /** @description The file or version is absent, undiscoverable, unpublished, or deleting. */
       404: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-      /** @description The idempotency key was reused for a different semantic request. */
-      409: {
         headers: {
           [name: string]: unknown;
         };
@@ -3379,17 +4214,17 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "idempotency_conflict";
+              code: "resource_not_found";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
+              message: "The requested resource was not found.";
               requestId: string;
             };
           };
         };
-      };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
+      };
+      /** @description Authorization or version metadata changed after preflight. */
+      409: {
         headers: {
           [name: string]: unknown;
         };
@@ -3406,7 +4241,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      /** @description The path, query, or unexpected body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -3421,26 +4256,10 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "invalid_idempotency_key";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key is invalid.";
-              requestId: string;
-            };
           };
         };
       };
-      /** @description Recipient resolution rate limit exceeded. */
-      429: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content?: never;
-      };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -3469,7 +4288,7 @@ interface operations {
       };
     };
   };
-  trashItem: {
+  restoreItemVersion: {
     parameters: {
       query?: never;
       header: {
@@ -3479,12 +4298,13 @@ interface operations {
       path: {
         workspaceId: string;
         itemId: string;
+        versionId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description The managed item was trashed or exactly replayed. */
+      /** @description The selected version is current or the exact result was replayed. */
       200: {
         headers: {
           /** @description Strong precondition for the next item mutation. */
@@ -3493,17 +4313,8 @@ interface operations {
         };
         content: {
           "application/json": {
-            itemId: string;
-            /** @enum {string} */
-            kind: "file" | "folder";
-            name: string;
-            parentItemId: string;
-            purgeAfterEpochMilliseconds: number | null;
-            revision: number;
-            /** @enum {string} */
-            state: "active" | "trashed" | "deleting";
-            volumeId: string;
-            workspaceId: string;
+            currentVersionId: string;
+            itemRevision: number;
           };
         };
       };
@@ -3644,12 +4455,9 @@ interface operations {
       };
     };
   };
-  listItemVersions: {
+  listVisitorGrants: {
     parameters: {
-      query?: {
-        limit?: number;
-        cursor?: string;
-      };
+      query?: never;
       header?: never;
       path: {
         workspaceId: string;
@@ -3659,7 +4467,7 @@ interface operations {
     };
     requestBody?: never;
     responses: {
-      /** @description At most 50 versions in version-ID order with an opaque 15-minute continuation cursor. */
+      /** @description Bounded visitor grant list without tokens. */
       200: {
         headers: {
           [name: string]: unknown;
@@ -3667,470 +4475,355 @@ interface operations {
         content: {
           "application/json": {
             items: {
+              createdAt: number;
+              email: string | null;
+              expiresAt: number;
+              /** Format: uuid */
+              grantId: string;
               /** @enum {string} */
-              archiveState: "available" | "cold" | "restoring" | "unavailable" | "corrupt";
-              byteLength: number;
-              contentDigest: string;
-              /**
-               * Format: finueva-safe-filename
-               * @description Custom format finueva-safe-filename requires NFC normalization and at most 255 UTF-8 bytes in addition to the structural pattern and maxLength constraints. Dot entries and Windows reserved base names are forbidden. Generated JSON Schema constraints are a necessary structural subset and do not independently enforce normalization or UTF-8 byte length.
-               */
-              displayFilename: string;
-              mediaType: string;
+              mode: "anyone" | "email";
               /** @enum {string} */
-              protectionClassification: "ordinary" | "opaque-encrypted";
-              revision: number;
+              role: "viewer";
               /** @enum {string} */
-              state: "current" | "superseded";
-              versionId: string;
+              source: "direct" | "inherited";
+              sourceItemId: string;
+              /** @enum {string} */
+              status: "pending" | "active" | "expired" | "revoked";
             }[];
-            nextCursor: string | null;
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
+      /** @description Drive user bearer required. */
       401: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "authentication_required";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is required.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The discoverable item does not permit metadata reads. */
+      /** @description Current item manager authority required. */
       403: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "permission_denied";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested action is not permitted.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The file is absent or undiscoverable. */
+      /** @description Capability or resource unavailable. */
       404: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "resource_not_found";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested resource was not found.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description Authorization changed after preflight. */
+      /** @description Conflicting request identity. */
       409: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "precondition_failed";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request precondition failed.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The path, query, duplicate query key, or unexpected body is invalid. */
+      /** @description Invalid request; visitor roles are viewer only. */
       422: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "invalid_request";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request is invalid.";
-              requestId: string;
-            };
-          };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
         };
+        content?: never;
       };
-      /** @description Identity, D1, or authorization authority is unavailable. */
+      /** @description Service unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "identity_authority_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is temporarily unavailable.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "service_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The service is temporarily unavailable.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
     };
   };
-  getItemVersion: {
+  createVisitorGrant: {
     parameters: {
       query?: never;
-      header?: never;
+      header: {
+        "Idempotency-Key": string;
+      };
       path: {
         workspaceId: string;
         itemId: string;
-        versionId: string;
       };
       cookie?: never;
     };
-    requestBody?: never;
+    requestBody: {
+      content: {
+        "application/json": {
+          expiresAt: number;
+          /** @constant */
+          mode: "anyone";
+          /** @constant */
+          role: "viewer";
+        } | {
+          email: string;
+          expiresAt: number;
+          /** @constant */
+          mode: "email";
+          /** @constant */
+          role: "viewer";
+        };
+      };
+    };
     responses: {
-      /** @description The exact workspace/item-bound immutable managed file version. */
+      /** @description Idempotent grant and confidential dispatch token; email does not enable public access. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
+            grant: {
+              createdAt: number;
+              email: string | null;
+              expiresAt: number;
+              /** Format: uuid */
+              grantId: string;
+              /** @enum {string} */
+              mode: "anyone" | "email";
+              /** @enum {string} */
+              role: "viewer";
+              /** @enum {string} */
+              status: "pending" | "active" | "expired" | "revoked";
+            };
+            token: string | null;
             /** @enum {string} */
-            archiveState: "available" | "cold" | "restoring" | "unavailable" | "corrupt";
-            byteLength: number;
-            contentDigest: string;
-            /**
-             * Format: finueva-safe-filename
-             * @description Custom format finueva-safe-filename requires NFC normalization and at most 255 UTF-8 bytes in addition to the structural pattern and maxLength constraints. Dot entries and Windows reserved base names are forbidden. Generated JSON Schema constraints are a necessary structural subset and do not independently enforce normalization or UTF-8 byte length.
-             */
-            displayFilename: string;
-            itemId: string;
-            mediaType: string;
-            /** @enum {string} */
-            protectionClassification: "ordinary" | "opaque-encrypted";
-            revision: number;
-            /** @enum {string} */
-            state: "current" | "superseded";
-            versionId: string;
-            workspaceId: string;
+            tokenPurpose: "view" | "verify-email";
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
-      401: {
+      /** @description Drive user bearer required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Current item manager authority required. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  getVisitorGrant: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+        grantId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Confidential existing link for copy or pending-email redispatch; inactive tokens are null. */
+      200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            error: {
+            grant: {
+              createdAt: number;
+              email: string | null;
+              expiresAt: number;
+              /** Format: uuid */
+              grantId: string;
               /** @enum {string} */
-              code: "authentication_required";
-              details: Record<string, never>;
+              mode: "anyone" | "email";
               /** @enum {string} */
-              message: "Authentication is required.";
-              requestId: string;
+              role: "viewer";
+              /** @enum {string} */
+              status: "pending" | "active" | "expired" | "revoked";
             };
+            token: string | null;
+            /** @enum {string} */
+            tokenPurpose: "view" | "verify-email";
           };
         };
       };
-      /** @description Managed storage is disabled for the discoverable file. */
-      403: {
+      /** @description Drive user bearer required. */
+      401: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "permission_denied";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested action is not permitted.";
-              requestId: string;
-            };
-          };
+        content?: never;
+      };
+      /** @description Current item manager authority required. */
+      403: {
+        headers: {
+          [name: string]: unknown;
         };
+        content?: never;
       };
-      /** @description The file or version is absent, undiscoverable, unpublished, or deleting. */
+      /** @description Capability or resource unavailable. */
       404: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "resource_not_found";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested resource was not found.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description Authorization or version metadata changed after preflight. */
+      /** @description Conflicting request identity. */
       409: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "precondition_failed";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request precondition failed.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The path, query, or unexpected body is invalid. */
+      /** @description Invalid request; visitor roles are viewer only. */
       422: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "invalid_request";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request is invalid.";
-              requestId: string;
-            };
-          };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
         };
+        content?: never;
       };
-      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
+      /** @description Service unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "identity_authority_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is temporarily unavailable.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "service_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The service is temporarily unavailable.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
     };
   };
-  restoreItemVersion: {
+  revokeVisitorGrant: {
     parameters: {
       query?: never;
-      header: {
-        "Idempotency-Key": string;
-        "If-Match": string;
-      };
+      header?: never;
       path: {
         workspaceId: string;
         itemId: string;
-        versionId: string;
+        grantId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description The selected version is current or the exact result was replayed. */
+      /** @description Revoked grant. */
       200: {
         headers: {
-          /** @description Strong precondition for the next item mutation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            currentVersionId: string;
-            itemRevision: number;
+            createdAt: number;
+            email: string | null;
+            expiresAt: number;
+            /** Format: uuid */
+            grantId: string;
+            /** @enum {string} */
+            mode: "anyone" | "email";
+            /** @enum {string} */
+            role: "viewer";
+            /** @enum {string} */
+            status: "pending" | "active" | "expired" | "revoked";
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
+      /** @description Drive user bearer required. */
       401: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "authentication_required";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is required.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The discoverable item does not permit this lifecycle action. */
+      /** @description Current item manager authority required. */
       403: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "permission_denied";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested action is not permitted.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The item or destination is absent or undiscoverable. */
+      /** @description Capability or resource unavailable. */
       404: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "resource_not_found";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested resource was not found.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      /** @description Conflicting request identity. */
       409: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "idempotency_conflict";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "precondition_failed";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request precondition failed.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The path, query, headers, key, or strict body is invalid. */
+      /** @description Invalid request; visitor roles are viewer only. */
       422: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "invalid_request";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request is invalid.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "invalid_idempotency_key";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key is invalid.";
-              requestId: string;
-            };
-          };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
         };
+        content?: never;
       };
-      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      /** @description Service unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "identity_authority_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is temporarily unavailable.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "service_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The service is temporarily unavailable.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
     };
   };
@@ -5561,6 +6254,8 @@ interface RegisterItemRecipientInput {
   readonly workspaceId: string;
   readonly itemId: string;
   readonly email: string;
+  /** Assert the freshly resolved Auth identity before any grant is created. */
+  readonly expectedRecipientUserId?: string;
   readonly role: "viewer" | "editor";
   readonly ifMatch: string;
   readonly idempotencyKey: string;
@@ -5814,6 +6509,10 @@ interface GetCurrentWorkspaceInput {
   readonly signal?: AbortSignal;
 }
 interface DriveOperations {
+  createVisitorGrant(input: CreateVisitorGrantInput): Promise<DriveOperationResult<VisitorGrantCreation, 200>>;
+  getVisitorGrant(input: GetVisitorGrantInput): Promise<DriveOperationResult<VisitorGrantCreation, 200>>;
+  listVisitorGrants(input: GetItemInput): Promise<DriveOperationResult<VisitorGrantPage, 200>>;
+  revokeVisitorGrant(input: RevokeVisitorGrantInput): Promise<DriveOperationResult<VisitorGrant, 200>>;
   registerItemRecipient(input: RegisterItemRecipientInput): Promise<DriveOperationResult<PermissionMutation, 200 | 201>>;
   listItemSharingPeople(input: ListItemSharingPeopleInput): Promise<DriveOperationResult<ItemSharingPeoplePage, 200>>;
   listIncomingShares(input?: ListIncomingSharesInput): Promise<DriveOperationResult<IncomingSharePage, 200>>;
@@ -5846,9 +6545,51 @@ interface DriveOperations {
   completeUpload(input: CompleteUploadInput): Promise<DriveOperationResult<UploadCompletion, 200 | 202>>;
   abortUpload(input: AbortUploadInput): Promise<DriveOperationResult<undefined, 204>>;
 }
+type VisitorGrantCreation = JsonResponse<"createVisitorGrant", 200>;
+type VisitorGrant = VisitorGrantCreation["grant"];
+type VisitorGrantPage = JsonResponse<"listVisitorGrants", 200>;
+type VisitorItem = JsonResponse<"readVisitorItem", 200>;
+type VisitorChildren = JsonResponse<"listVisitorChildren", 200>;
+type VisitorSession = JsonResponse<"redeemVisitorInvitation", 200>;
+type CreateVisitorGrantInput = GetItemInput & {
+  readonly command: JsonRequest<"createVisitorGrant">;
+  readonly idempotencyKey: string;
+};
+type RevokeVisitorGrantInput = GetItemInput & {
+  readonly grantId: string;
+};
+type GetVisitorGrantInput = GetItemInput & {
+  readonly grantId: string;
+};
+interface VisitorReadInput {
+  readonly itemId?: string;
+  readonly signal?: AbortSignal;
+}
+interface VisitorChildrenInput extends VisitorReadInput {
+  readonly after?: string;
+}
+interface VisitorDownloadInput extends VisitorReadInput {
+  readonly method?: "GET" | "HEAD";
+  readonly range?: string;
+}
+interface DriveVisitorClientConfig {
+  readonly baseUrl: string;
+  readonly token: string;
+  readonly fetch?: typeof globalThis.fetch;
+  readonly timeoutMilliseconds?: number;
+}
+interface DriveVisitorClient {
+  readItem(input?: VisitorReadInput): Promise<DriveOperationResult<VisitorItem, 200>>;
+  listChildren(input?: VisitorChildrenInput): Promise<DriveOperationResult<VisitorChildren, 200>>;
+  createDownload(input?: VisitorDownloadInput): Promise<DriveOperationResult<ManagedDownloadDescriptor, 200>>;
+  redeemInvitation(input: {
+    readonly sessionToken: string;
+    readonly signal?: AbortSignal;
+  }): Promise<DriveOperationResult<VisitorSession, 200>>;
+}
 interface DriveServerClient extends DriveOperations {}
 interface DriveClient extends DriveOperations {
   uploadFile(input: UploadFileInput): Promise<DriveOperationResult<UploadCompletion, 200 | 202>>;
 }
 //#endregion
-export { ProtectionClassification as $, IncomingShareContext as A, ManagedDownloadRestorePending as B, FolderItem as C, WorkspaceDiscoveryPage as Ct, GetItemVersionInput as D, operations as Dt, GetItemInput as E, WorkspaceUsage as Et, ListItemPermissionsInput as F, ManagedItemVersionRestoreResult as G, ManagedItemVersion as H, ListItemSharingPeopleInput as I, PermissionAction as J, ManagedLifecycleItem as K, ListItemVersionsInput as L, ItemSharingPeoplePage as M, ListFolderChildrenInput as N, GetUploadStatusInput as O, ListIncomingSharesInput as P, PermissionPage as Q, ListWorkspaceItemsInput as R, EffectivePermissionResponse as S, WorkspaceDiscoveryItem as St, GetCurrentWorkspaceInput as T, WorkspaceItemSearchPage as Tt, ManagedItemVersionPage as U, ManagedItemMetadata as V, ManagedItemVersionResource as W, PermissionGrantee as X, PermissionGrant as Y, PermissionMutation as Z, DriveOperations as _, UploadFileProgressCallback as _t, CreateItemPermissionInput as a, RestoreItemInput as at, DriveServerClientConfig as b, UploadSession as bt, CurrentWorkspace as c, SearchWorkspaceItemsInput as ct, DownloadItemResult as d, UpdateItemPermissionInput as dt, ReadEffectiveItemPermissionsInput as et, DriveClient as f, UploadCompletion as ft, DriveOperationResult as g, UploadFileProgress as gt, DriveCredentialProvider as h, UploadFilePhase as ht, CreateFolderInput as i, RegisteredRecipientDisplay as it, IncomingSharePage as j, GetWorkspaceUsageInput as k, CurrentWorkspaceSources as l, TrashItemInput as lt, DriveCredentialContext as m, UploadFileInput as mt, CompleteUploadInput as n, RecordUploadPartInput as nt, CreateUploadInput as o, RestoreItemVersionInput as ot, DriveClientConfig as p, UploadConfirmedPart as pt, PendingUpload as q, CreateDownloadInput as r, RegisterItemRecipientInput as rt, CreateUploadPartDescriptorInput as s, RevokeItemPermissionInput as st, AbortUploadInput as t, ReadyUpload as tt, DeleteItemInput as u, UpdateItemInput as ut, DriveResponseValidators as v, UploadPartDescriptor as vt, FolderPage as w, WorkspaceItemSearchItem as wt, EffectivePermissionAction as x, UploadStatus as xt, DriveServerClient as y, UploadPartResult as yt, ManagedDownloadDescriptor as z };
+export { PermissionGrant as $, GetItemVersionInput as A, VisitorGrant as At, ListItemSharingPeopleInput as B, WorkspaceUsage as Bt, DriveVisitorClientConfig as C, UploadPartDescriptor as Ct, FolderPage as D, VisitorChildren as Dt, FolderItem as E, UploadStatus as Et, IncomingSharePage as F, VisitorSession as Ft, ManagedItemMetadata as G, ListWorkspaceItemsInput as H, ItemSharingPeoplePage as I, WorkspaceDiscoveryItem as It, ManagedItemVersionResource as J, ManagedItemVersion as K, ListFolderChildrenInput as L, WorkspaceDiscoveryPage as Lt, GetVisitorGrantInput as M, VisitorGrantPage as Mt, GetWorkspaceUsageInput as N, VisitorItem as Nt, GetCurrentWorkspaceInput as O, VisitorChildrenInput as Ot, IncomingShareContext as P, VisitorReadInput as Pt, PermissionAction as Q, ListIncomingSharesInput as R, WorkspaceItemSearchItem as Rt, DriveVisitorClient as S, UploadFileProgressCallback as St, EffectivePermissionResponse as T, UploadSession as Tt, ManagedDownloadDescriptor as U, ListItemVersionsInput as V, operations as Vt, ManagedDownloadRestorePending as W, ManagedLifecycleItem as X, ManagedItemVersionRestoreResult as Y, PendingUpload as Z, DriveOperationResult as _, UploadCompletion as _t, CreateItemPermissionInput as a, ReadyUpload as at, DriveServerClient as b, UploadFilePhase as bt, CreateVisitorGrantInput as c, RegisteredRecipientDisplay as ct, DeleteItemInput as d, RevokeItemPermissionInput as dt, PermissionGrantee as et, DownloadItemResult as f, RevokeVisitorGrantInput as ft, DriveCredentialProvider as g, UpdateItemPermissionInput as gt, DriveCredentialContext as h, UpdateItemInput as ht, CreateFolderInput as i, ReadEffectiveItemPermissionsInput as it, GetUploadStatusInput as j, VisitorGrantCreation as jt, GetItemInput as k, VisitorDownloadInput as kt, CurrentWorkspace as l, RestoreItemInput as lt, DriveClientConfig as m, TrashItemInput as mt, CompleteUploadInput as n, PermissionPage as nt, CreateUploadInput as o, RecordUploadPartInput as ot, DriveClient as p, SearchWorkspaceItemsInput as pt, ManagedItemVersionPage as q, CreateDownloadInput as r, ProtectionClassification as rt, CreateUploadPartDescriptorInput as s, RegisterItemRecipientInput as st, AbortUploadInput as t, PermissionMutation as tt, CurrentWorkspaceSources as u, RestoreItemVersionInput as ut, DriveOperations as v, UploadConfirmedPart as vt, EffectivePermissionAction as w, UploadPartResult as wt, DriveServerClientConfig as x, UploadFileProgress as xt, DriveResponseValidators as y, UploadFileInput as yt, ListItemPermissionsInput as z, WorkspaceItemSearchPage as zt };