@finueva/drive 0.12.0 → 0.14.0

package/dist/contract.d.ts

@@ -287,6 +287,316 @@ interface operations {
       };
     };
   };
+  listVisitorChildren: {
+    parameters: {
+      query?: {
+        itemId?: string;
+        after?: string;
+      };
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Current child page. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            items: {
+              itemId: string;
+              /** @enum {string} */
+              kind: "file" | "folder";
+              name: string | null;
+            }[];
+            nextAfter: string | null;
+          };
+        };
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  createVisitorDownload: {
+    parameters: {
+      query?: {
+        itemId?: string;
+      };
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Native managed download descriptor. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            expiresAtEpochMilliseconds: number;
+            headers: {
+              [key: string]: string;
+            };
+            /** @enum {string} */
+            method: "GET" | "HEAD";
+            /** @enum {string} */
+            mode: "presigned-single";
+            response: {
+              /** @enum {string} */
+              acceptRanges: "bytes";
+              byteLength: number;
+              contentDisposition: string;
+              contentLength: number;
+              contentRange: string | null;
+              contentType: string;
+              etag: string;
+              status: 200 | 206;
+              versionId: string;
+            };
+            /** Format: uri */
+            url: string;
+          };
+        };
+      };
+      /** @description Not modified. */
+      304: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Precondition failed. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Range unsatisfiable. */
+      416: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  readVisitorItem: {
+    parameters: {
+      query?: {
+        itemId?: string;
+      };
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Current descendant item. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string | null;
+            /** @enum {string} */
+            role: "viewer";
+            rootItemId: string;
+          };
+        };
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  redeemVisitorInvitation: {
+    parameters: {
+      query?: never;
+      header: {
+        /** @description DriveVisitor followed by a space and the capability. Never place tokens in URLs. */
+        Authorization: string;
+      };
+      path?: never;
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          sessionToken: string;
+        };
+      };
+    };
+    responses: {
+      /** @description Session bound to the invitation's exact email and scope. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            expiresAt: number;
+            grantId: string;
+            /** @enum {string} */
+            role: "viewer";
+          };
+        };
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   getCurrentWorkspace: {
     parameters: {
       query?: never;
@@ -419,6 +729,138 @@ interface operations {
       };
     };
   };
+  ensureOrganizationWorkspaceAccess: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Current workspace is accessible to the verified organization subject. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            rootItemId: string;
+            rootVolumeId: string;
+            workspaceId: string;
+            workspaceReference: {
+              /** @enum {string} */
+              type: "personal";
+              userId: string;
+            } | {
+              organizationId: string;
+              /** @enum {string} */
+              type: "organization";
+            };
+          };
+        };
+      };
+      /** @description A valid user credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Organization context is required or storage is disabled. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The selected workspace is not provisioned. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Body and query input are not accepted. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Authority or canonical storage state is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
   getCurrentWorkspaceSources: {
     parameters: {
       query?: never;
@@ -570,6 +1012,8 @@ interface operations {
         view?: "recent" | "shared" | "trash";
         kind?: "file" | "folder";
         creatorUserId?: string;
+        /** @description Comma-separated exact lowercase media types (1–16 unique values). Matches published current file versions, not filename extensions. */
+        mediaTypes?: string;
         limit?: number;
         cursor?: string;
       };
@@ -1266,6 +1710,74 @@ interface operations {
       };
     };
   };
+  getFileAccessContext: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Current file version, generation and access snapshot; not a write credential. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            canRead: boolean;
+            canWrite: boolean;
+            /** Format: uuid */
+            contentGeneration: string | null;
+            itemId: string;
+            subject: string;
+            validUntil: number;
+            versionId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description User authentication required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description File unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Authority changed. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Authority unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   listFolderChildren: {
     parameters: {
       query?: {
@@ -3655,6 +4167,113 @@ interface operations {
       };
     };
   };
+  createFileVersionUpload: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          byteLength: number;
+          digest: string;
+          expectedVersionId: string;
+        };
+      };
+    };
+    responses: {
+      /** @description Exact replay of the admitted checkpoint upload. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            expiresAtEpochMilliseconds: number;
+            itemId: string;
+            /** @enum {string} */
+            mode: "presigned-multipart" | "server-mediated-zero-byte";
+            /** @enum {number} */
+            partByteLength: 33554432;
+            partCount: number;
+            revision: number;
+            uploadId: string;
+            versionId: string;
+          };
+        };
+      };
+      /** @description New checkpoint upload using ordinary archive multipart operations. */
+      201: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            expiresAtEpochMilliseconds: number;
+            itemId: string;
+            /** @enum {string} */
+            mode: "presigned-multipart" | "server-mediated-zero-byte";
+            /** @enum {number} */
+            partByteLength: 33554432;
+            partCount: number;
+            revision: number;
+            uploadId: string;
+            versionId: string;
+          };
+        };
+      };
+      /** @description Drive user authentication required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Current file update permission required. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description File or upload unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Expected version, quota or idempotency conflict. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid conditional version request. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Archive or persistence unavailable; retain operation identity for retry. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   listItemVersions: {
     parameters: {
       query?: {
@@ -3877,7 +4496,156 @@ interface operations {
           };
         };
       };
-      /** @description Managed storage is disabled for the discoverable file. */
+      /** @description Managed storage is disabled for the discoverable file. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The file or version is absent, undiscoverable, unpublished, or deleting. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Authorization or version metadata changed after preflight. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, or unexpected body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  restoreItemVersion: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+        versionId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The selected version is current or the exact result was replayed. */
+      200: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            currentVersionId: string;
+            itemRevision: number;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this lifecycle action. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -3895,7 +4663,7 @@ interface operations {
           };
         };
       };
-      /** @description The file or version is absent, undiscoverable, unpublished, or deleting. */
+      /** @description The item or destination is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -3913,13 +4681,22 @@ interface operations {
           };
         };
       };
-      /** @description Authorization or version metadata changed after preflight. */
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
       409: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
             error: {
               /** @enum {string} */
               code: "precondition_failed";
@@ -3931,7 +4708,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, or unexpected body is invalid. */
+      /** @description The path, query, headers, key, or strict body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -3946,10 +4723,19 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
           };
         };
       };
-      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -3978,170 +4764,375 @@ interface operations {
       };
     };
   };
-  restoreItemVersion: {
+  listVisitorGrants: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Bounded visitor grant list without tokens. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            items: {
+              createdAt: number;
+              email: string | null;
+              expiresAt: number;
+              /** Format: uuid */
+              grantId: string;
+              /** @enum {string} */
+              mode: "anyone" | "email";
+              /** @enum {string} */
+              role: "viewer";
+              /** @enum {string} */
+              source: "direct" | "inherited";
+              sourceItemId: string;
+              /** @enum {string} */
+              status: "pending" | "active" | "expired" | "revoked";
+            }[];
+          };
+        };
+      };
+      /** @description Drive user bearer required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Current item manager authority required. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  createVisitorGrant: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          expiresAt: number;
+          /** @constant */
+          mode: "anyone";
+          /** @constant */
+          role: "viewer";
+        } | {
+          email: string;
+          expiresAt: number;
+          /** @constant */
+          mode: "email";
+          /** @constant */
+          role: "viewer";
+        };
+      };
+    };
+    responses: {
+      /** @description Idempotent grant and confidential dispatch token; email does not enable public access. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            grant: {
+              createdAt: number;
+              email: string | null;
+              expiresAt: number;
+              /** Format: uuid */
+              grantId: string;
+              /** @enum {string} */
+              mode: "anyone" | "email";
+              /** @enum {string} */
+              role: "viewer";
+              /** @enum {string} */
+              status: "pending" | "active" | "expired" | "revoked";
+            };
+            token: string | null;
+            /** @enum {string} */
+            tokenPurpose: "view" | "verify-email";
+          };
+        };
+      };
+      /** @description Drive user bearer required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Current item manager authority required. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  getVisitorGrant: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+        grantId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description Confidential existing link for copy or pending-email redispatch; inactive tokens are null. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            grant: {
+              createdAt: number;
+              email: string | null;
+              expiresAt: number;
+              /** Format: uuid */
+              grantId: string;
+              /** @enum {string} */
+              mode: "anyone" | "email";
+              /** @enum {string} */
+              role: "viewer";
+              /** @enum {string} */
+              status: "pending" | "active" | "expired" | "revoked";
+            };
+            token: string | null;
+            /** @enum {string} */
+            tokenPurpose: "view" | "verify-email";
+          };
+        };
+      };
+      /** @description Drive user bearer required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Current item manager authority required. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Capability or resource unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Conflicting request identity. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid request; visitor roles are viewer only. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Service unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
+  revokeVisitorGrant: {
     parameters: {
       query?: never;
-      header: {
-        "Idempotency-Key": string;
-        "If-Match": string;
-      };
+      header?: never;
       path: {
         workspaceId: string;
         itemId: string;
-        versionId: string;
+        grantId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description The selected version is current or the exact result was replayed. */
+      /** @description Revoked grant. */
       200: {
         headers: {
-          /** @description Strong precondition for the next item mutation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            currentVersionId: string;
-            itemRevision: number;
+            createdAt: number;
+            email: string | null;
+            expiresAt: number;
+            /** Format: uuid */
+            grantId: string;
+            /** @enum {string} */
+            mode: "anyone" | "email";
+            /** @enum {string} */
+            role: "viewer";
+            /** @enum {string} */
+            status: "pending" | "active" | "expired" | "revoked";
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
+      /** @description Drive user bearer required. */
       401: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "authentication_required";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is required.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The discoverable item does not permit this lifecycle action. */
+      /** @description Current item manager authority required. */
       403: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "permission_denied";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested action is not permitted.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The item or destination is absent or undiscoverable. */
+      /** @description Capability or resource unavailable. */
       404: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "resource_not_found";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The requested resource was not found.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      /** @description Conflicting request identity. */
       409: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "idempotency_conflict";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "precondition_failed";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request precondition failed.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
-      /** @description The path, query, headers, key, or strict body is invalid. */
+      /** @description Invalid request; visitor roles are viewer only. */
       422: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "invalid_request";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request is invalid.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "invalid_idempotency_key";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key is invalid.";
-              requestId: string;
-            };
-          };
+        content?: never;
+      };
+      /** @description Bounded admission exhausted; retry after one minute. */
+      429: {
+        headers: {
+          [name: string]: unknown;
         };
+        content?: never;
       };
-      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      /** @description Service unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "identity_authority_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "Authentication is temporarily unavailable.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "service_unavailable";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The service is temporarily unavailable.";
-              requestId: string;
-            };
-          };
-        };
+        content?: never;
       };
     };
   };
@@ -5376,6 +6367,109 @@ interface operations {
       };
     };
   };
+  commitFileVersion: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        uploadId: string;
+      };
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          expectedVersionId: string;
+        };
+      };
+    };
+    responses: {
+      /** @description Archive verified and exact-version checkpoint committed or replayed. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            byteLength: number;
+            /** @description Caller-declared whole-file SHA-256. Portable profiles independently verify file bytes before publication; legacy profiles retain provider-checksum semantics. */
+            callerDeclaredContentDigest: string;
+            displayFilename: string;
+            itemId: string;
+            mediaType: string;
+            /** @enum {string} */
+            state: "ready";
+            uploadId: string;
+            versionId: string;
+          };
+        };
+      };
+      /** @description Archive hash verification still pending; retain the same operation identity. */
+      202: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            state: "verifying";
+            totalByteLength: number;
+            uploadId: string;
+            verificationRevision: number;
+            verifiedByteLength: number;
+            versionId: string;
+          };
+        };
+      };
+      /** @description Drive user authentication required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Current file update permission required. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description File or upload unavailable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Expected version, quota or idempotency conflict. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Invalid conditional version request. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Archive or persistence unavailable; retain operation identity for retry. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   getWorkspaceUsage: {
     parameters: {
       query?: never;
@@ -5529,6 +6623,20 @@ type JsonRequest<Name extends keyof operations> = operations[Name] extends {
     };
   };
 } ? Body : never;
+type CreateFileVersionUploadInput = Readonly<JsonRequest<"createFileVersionUpload"> & {
+  workspaceId: string;
+  itemId: string;
+  idempotencyKey: string;
+  signal?: AbortSignal;
+}>;
+type FileAccessContext = Readonly<JsonResponse<"getFileAccessContext", 200>>;
+type CommitFileVersionInput = Readonly<JsonRequest<"commitFileVersion"> & {
+  workspaceId: string;
+  itemId: string;
+  uploadId: string;
+  idempotencyKey: string;
+  signal?: AbortSignal;
+}>;
 type ResourcePath = operations["listFolderChildren"]["parameters"]["path"];
 type PageQuery = NonNullable<operations["listFolderChildren"]["parameters"]["query"]>;
 type SearchWorkspaceItemsPath = operations["searchWorkspaceItems"]["parameters"]["path"];
@@ -5608,6 +6716,7 @@ interface GetWorkspaceUsageInput {
   readonly signal?: AbortSignal;
 }
 interface ListWorkspaceItemsInput extends GetWorkspaceUsageInput {
+  readonly mediaTypes?: readonly string[];
   readonly view?: "recent" | "shared" | "trash";
   readonly kind?: "file" | "folder";
   readonly creatorUserId?: string;
@@ -5823,10 +6932,27 @@ interface UploadFileInput {
   readonly signal?: AbortSignal;
   readonly onProgress?: UploadFileProgressCallback;
 }
+interface UploadFileVersionInput {
+  readonly workspaceId: string;
+  readonly itemId: string;
+  readonly expectedVersionId: string;
+  readonly source: Blob;
+  readonly idempotencyKey: string;
+  readonly completionIdempotencyKey: string;
+  readonly signal?: AbortSignal;
+  readonly onProgress?: UploadFileProgressCallback;
+}
 interface GetCurrentWorkspaceInput {
   readonly signal?: AbortSignal;
 }
 interface DriveOperations {
+  getFileAccessContext(input: GetItemInput): Promise<DriveOperationResult<FileAccessContext, 200>>;
+  createFileVersionUpload(input: CreateFileVersionUploadInput): Promise<DriveOperationResult<UploadSession, 200 | 201>>;
+  commitFileVersion(input: CommitFileVersionInput): Promise<DriveOperationResult<UploadCompletion, 200 | 202>>;
+  createVisitorGrant(input: CreateVisitorGrantInput): Promise<DriveOperationResult<VisitorGrantCreation, 200>>;
+  getVisitorGrant(input: GetVisitorGrantInput): Promise<DriveOperationResult<VisitorGrantCreation, 200>>;
+  listVisitorGrants(input: GetItemInput): Promise<DriveOperationResult<VisitorGrantPage, 200>>;
+  revokeVisitorGrant(input: RevokeVisitorGrantInput): Promise<DriveOperationResult<VisitorGrant, 200>>;
   registerItemRecipient(input: RegisterItemRecipientInput): Promise<DriveOperationResult<PermissionMutation, 200 | 201>>;
   listItemSharingPeople(input: ListItemSharingPeopleInput): Promise<DriveOperationResult<ItemSharingPeoplePage, 200>>;
   listIncomingShares(input?: ListIncomingSharesInput): Promise<DriveOperationResult<IncomingSharePage, 200>>;
@@ -5834,6 +6960,7 @@ interface DriveOperations {
   getWorkspaceUsage(input: GetWorkspaceUsageInput): Promise<DriveOperationResult<WorkspaceUsage, 200>>;
   getCurrentWorkspaceSources(input?: GetCurrentWorkspaceInput): Promise<DriveOperationResult<CurrentWorkspaceSources, 200>>;
   getCurrentWorkspace(input?: GetCurrentWorkspaceInput): Promise<DriveOperationResult<CurrentWorkspace, 200>>;
+  ensureOrganizationWorkspaceAccess(input?: GetCurrentWorkspaceInput): Promise<DriveOperationResult<CurrentWorkspace, 200>>;
   getItem(input: GetItemInput): Promise<DriveOperationResult<ManagedItemMetadata, 200>>;
   searchWorkspaceItems(input: SearchWorkspaceItemsInput): Promise<DriveOperationResult<WorkspaceItemSearchPage, 200>>;
   listFolderChildren(input: ListFolderChildrenInput): Promise<DriveOperationResult<FolderPage, 200>>;
@@ -5859,9 +6986,53 @@ interface DriveOperations {
   completeUpload(input: CompleteUploadInput): Promise<DriveOperationResult<UploadCompletion, 200 | 202>>;
   abortUpload(input: AbortUploadInput): Promise<DriveOperationResult<undefined, 204>>;
 }
+type VisitorGrantCreation = JsonResponse<"createVisitorGrant", 200>;
+type VisitorGrant = VisitorGrantCreation["grant"];
+type VisitorGrantPage = JsonResponse<"listVisitorGrants", 200>;
+type VisitorItem = JsonResponse<"readVisitorItem", 200>;
+type VisitorChildren = JsonResponse<"listVisitorChildren", 200>;
+type VisitorSession = JsonResponse<"redeemVisitorInvitation", 200>;
+type CreateVisitorGrantInput = GetItemInput & {
+  readonly command: JsonRequest<"createVisitorGrant">;
+  readonly idempotencyKey: string;
+};
+type RevokeVisitorGrantInput = GetItemInput & {
+  readonly grantId: string;
+};
+type GetVisitorGrantInput = GetItemInput & {
+  readonly grantId: string;
+};
+interface VisitorReadInput {
+  readonly itemId?: string;
+  readonly signal?: AbortSignal;
+}
+interface VisitorChildrenInput extends VisitorReadInput {
+  readonly after?: string;
+}
+interface VisitorDownloadInput extends VisitorReadInput {
+  readonly method?: "GET" | "HEAD";
+  readonly range?: string;
+}
+interface DriveVisitorClientConfig {
+  readonly baseUrl: string;
+  readonly token: string;
+  readonly fetch?: typeof globalThis.fetch;
+  readonly timeoutMilliseconds?: number;
+}
+interface DriveVisitorClient {
+  readItem(input?: VisitorReadInput): Promise<DriveOperationResult<VisitorItem, 200>>;
+  listChildren(input?: VisitorChildrenInput): Promise<DriveOperationResult<VisitorChildren, 200>>;
+  createDownload(input?: VisitorDownloadInput): Promise<DriveOperationResult<ManagedDownloadDescriptor, 200>>;
+  downloadItem(input?: VisitorDownloadInput): Promise<Response>;
+  redeemInvitation(input: {
+    readonly sessionToken: string;
+    readonly signal?: AbortSignal;
+  }): Promise<DriveOperationResult<VisitorSession, 200>>;
+}
 interface DriveServerClient extends DriveOperations {}
 interface DriveClient extends DriveOperations {
+  uploadFileVersion(input: UploadFileVersionInput): Promise<DriveOperationResult<UploadCompletion, 200 | 202>>;
   uploadFile(input: UploadFileInput): Promise<DriveOperationResult<UploadCompletion, 200 | 202>>;
 }
 //#endregion
-export { ProtectionClassification as $, IncomingShareContext as A, ManagedDownloadRestorePending as B, FolderItem as C, WorkspaceDiscoveryPage as Ct, GetItemVersionInput as D, operations as Dt, GetItemInput as E, WorkspaceUsage as Et, ListItemPermissionsInput as F, ManagedItemVersionRestoreResult as G, ManagedItemVersion as H, ListItemSharingPeopleInput as I, PermissionAction as J, ManagedLifecycleItem as K, ListItemVersionsInput as L, ItemSharingPeoplePage as M, ListFolderChildrenInput as N, GetUploadStatusInput as O, ListIncomingSharesInput as P, PermissionPage as Q, ListWorkspaceItemsInput as R, EffectivePermissionResponse as S, WorkspaceDiscoveryItem as St, GetCurrentWorkspaceInput as T, WorkspaceItemSearchPage as Tt, ManagedItemVersionPage as U, ManagedItemMetadata as V, ManagedItemVersionResource as W, PermissionGrantee as X, PermissionGrant as Y, PermissionMutation as Z, DriveOperations as _, UploadFileProgressCallback as _t, CreateItemPermissionInput as a, RestoreItemInput as at, DriveServerClientConfig as b, UploadSession as bt, CurrentWorkspace as c, SearchWorkspaceItemsInput as ct, DownloadItemResult as d, UpdateItemPermissionInput as dt, ReadEffectiveItemPermissionsInput as et, DriveClient as f, UploadCompletion as ft, DriveOperationResult as g, UploadFileProgress as gt, DriveCredentialProvider as h, UploadFilePhase as ht, CreateFolderInput as i, RegisteredRecipientDisplay as it, IncomingSharePage as j, GetWorkspaceUsageInput as k, CurrentWorkspaceSources as l, TrashItemInput as lt, DriveCredentialContext as m, UploadFileInput as mt, CompleteUploadInput as n, RecordUploadPartInput as nt, CreateUploadInput as o, RestoreItemVersionInput as ot, DriveClientConfig as p, UploadConfirmedPart as pt, PendingUpload as q, CreateDownloadInput as r, RegisterItemRecipientInput as rt, CreateUploadPartDescriptorInput as s, RevokeItemPermissionInput as st, AbortUploadInput as t, ReadyUpload as tt, DeleteItemInput as u, UpdateItemInput as ut, DriveResponseValidators as v, UploadPartDescriptor as vt, FolderPage as w, WorkspaceItemSearchItem as wt, EffectivePermissionAction as x, UploadStatus as xt, DriveServerClient as y, UploadPartResult as yt, ManagedDownloadDescriptor as z };
+export { ManagedLifecycleItem as $, FolderPage as A, UploadStatus as At, ListFolderChildrenInput as B, WorkspaceDiscoveryItem as Bt, DriveServerClientConfig as C, UploadFilePhase as Ct, EffectivePermissionResponse as D, UploadPartDescriptor as Dt, EffectivePermissionAction as E, UploadFileVersionInput as Et, GetVisitorGrantInput as F, VisitorGrantCreation as Ft, ListWorkspaceItemsInput as G, operations as Gt, ListItemPermissionsInput as H, WorkspaceItemSearchItem as Ht, GetWorkspaceUsageInput as I, VisitorGrantPage as It, ManagedItemMetadata as J, ManagedDownloadDescriptor as K, IncomingShareContext as L, VisitorItem as Lt, GetItemInput as M, VisitorChildrenInput as Mt, GetItemVersionInput as N, VisitorDownloadInput as Nt, FileAccessContext as O, UploadPartResult as Ot, GetUploadStatusInput as P, VisitorGrant as Pt, ManagedItemVersionRestoreResult as Q, IncomingSharePage as R, VisitorReadInput as Rt, DriveServerClient as S, UploadFileInput as St, DriveVisitorClientConfig as T, UploadFileProgressCallback as Tt, ListItemSharingPeopleInput as U, WorkspaceItemSearchPage as Ut, ListIncomingSharesInput as V, WorkspaceDiscoveryPage as Vt, ListItemVersionsInput as W, WorkspaceUsage as Wt, ManagedItemVersionPage as X, ManagedItemVersion as Y, ManagedItemVersionResource as Z, DriveCredentialContext as _, TrashItemInput as _t, CreateFileVersionUploadInput as a, PermissionPage as at, DriveOperations as b, UploadCompletion as bt, CreateUploadInput as c, ReadyUpload as ct, CurrentWorkspace as d, RegisteredRecipientDisplay as dt, PendingUpload as et, CurrentWorkspaceSources as f, RestoreItemInput as ft, DriveClientConfig as g, SearchWorkspaceItemsInput as gt, DriveClient as h, RevokeVisitorGrantInput as ht, CreateDownloadInput as i, PermissionMutation as it, GetCurrentWorkspaceInput as j, VisitorChildren as jt, FolderItem as k, UploadSession as kt, CreateUploadPartDescriptorInput as l, RecordUploadPartInput as lt, DownloadItemResult as m, RevokeItemPermissionInput as mt, CommitFileVersionInput as n, PermissionGrant as nt, CreateFolderInput as o, ProtectionClassification as ot, DeleteItemInput as p, RestoreItemVersionInput as pt, ManagedDownloadRestorePending as q, CompleteUploadInput as r, PermissionGrantee as rt, CreateItemPermissionInput as s, ReadEffectiveItemPermissionsInput as st, AbortUploadInput as t, PermissionAction as tt, CreateVisitorGrantInput as u, RegisterItemRecipientInput as ut, DriveCredentialProvider as v, UpdateItemInput as vt, DriveVisitorClient as w, UploadFileProgress as wt, DriveResponseValidators as x, UploadConfirmedPart as xt, DriveOperationResult as y, UpdateItemPermissionInput as yt, ItemSharingPeoplePage as z, VisitorSession as zt };