@finueva/drive 0.2.0 → 0.3.0

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { A as UploadQuotaReservation, D as ReservedUploadQuota, _ as FolderPage, a as CreateUploadInput, g as FolderItem, n as AbortedUploadQuota, o as CurrentWorkspace, p as DriveServerClientConfig, s as DriveClient, t as AbortUploadInput, v as GetCurrentWorkspaceInput, y as ListFolderChildrenInput } from "./contract.js";
+import { A as ProtectionClassification, C as ListFolderChildrenInput, H as UploadPartResult, I as UploadConfirmedPart, M as ReadyUpload, N as RecordUploadPartInput, S as GetUploadStatusInput, U as UploadSession, V as UploadPartDescriptor, W as UploadStatus, a as CreateUploadInput, b as FolderPage, g as DriveServerClientConfig, h as DriveServerClient, n as CompleteUploadInput, o as CreateUploadPartDescriptorInput, s as CurrentWorkspace, t as AbortUploadInput, x as GetCurrentWorkspaceInput, y as FolderItem } from "./contract.js";
 //#region src/server.d.ts
-declare function createDriveServerClient(config: DriveServerClientConfig): DriveClient;
+declare function createDriveServerClient(config: DriveServerClientConfig): DriveServerClient;
 //#endregion
-export { type AbortUploadInput, type AbortedUploadQuota, type CreateUploadInput, type CurrentWorkspace, type DriveClient, type DriveServerClientConfig, type FolderItem, type FolderPage, type GetCurrentWorkspaceInput, type ListFolderChildrenInput, type ReservedUploadQuota, type UploadQuotaReservation, createDriveServerClient };
+export { type AbortUploadInput, type CompleteUploadInput, type CreateUploadInput, type CreateUploadPartDescriptorInput, type CurrentWorkspace, type DriveServerClient, type DriveServerClientConfig, type FolderItem, type FolderPage, type GetCurrentWorkspaceInput, type GetUploadStatusInput, type ListFolderChildrenInput, type ProtectionClassification, type ReadyUpload, type RecordUploadPartInput, type UploadConfirmedPart, type UploadPartDescriptor, type UploadPartResult, type UploadSession, type UploadStatus, createDriveServerClient };

package/dist/server.js

@@ -10,6 +10,7 @@ const DRIVE_API_ERROR_CODES = Object.freeze([
 	"precondition_failed",
 	"idempotency_conflict",
 	"quota_exceeded",
+	"upload_recovery_required",
 	"service_unavailable",
 	"internal_error"
 ]);
@@ -24,6 +25,7 @@ const DRIVE_API_ERROR_MESSAGES = Object.freeze({
 	precondition_failed: "The request precondition failed.",
 	idempotency_conflict: "The idempotency key conflicts with an earlier request.",
 	quota_exceeded: "The workspace storage quota would be exceeded.",
+	upload_recovery_required: "The upload requires recovery before it can continue.",
 	service_unavailable: "The service is temporarily unavailable.",
 	internal_error: "The request could not be completed."
 });
@@ -79,6 +81,28 @@ async function parseResponse(response, operationSignal, preconditionStatus, succ
 		validators: readValidators(response.headers)
 	});
 }
+async function parseNoContentResponse(response, operationSignal, preconditionStatus, successStatuses, allowedErrorCodes) {
+	const requestId = safeRequestId(response.headers.get("x-request-id"));
+	if (requestId === null) {
+		cancelResponse(response);
+		throw new DriveError("invalid_response", { status: response.status });
+	}
+	if (!successStatuses.includes(response.status)) throw await normalizeError(response, requestId, operationSignal, preconditionStatus, false, allowedErrorCodes);
+	const contentLength = response.headers.get("content-length");
+	if (response.body !== null || contentLength !== null && contentLength !== "0" || response.headers.has("content-type")) {
+		cancelResponse(response);
+		throw new DriveError("invalid_response", {
+			status: response.status,
+			requestId
+		});
+	}
+	return Object.freeze({
+		data: void 0,
+		status: response.status,
+		requestId,
+		validators: Object.freeze({})
+	});
+}
 function parseCollectionEtag(value) {
 	const match = COLLECTION_ETAG.exec(value);
 	if (!match) return void 0;
@@ -137,6 +161,7 @@ function errorStatusMatches(code, status, preconditionStatus, allowsQuotaExceede
 		precondition_failed: preconditionStatus === null ? [] : [preconditionStatus],
 		idempotency_conflict: [409],
 		quota_exceeded: [409],
+		upload_recovery_required: [409],
 		service_unavailable: [503],
 		internal_error: [500]
 	}[code].includes(status);
@@ -247,6 +272,7 @@ const WORKSPACE_ID$1 = /^drive\.workspace\.[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-
 const VOLUME_ID = /^drive\.volume\.[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 const GRANT_ID$1 = /^drive\.grant\.[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 const UPLOAD_ID$1 = /^drive\.upload\.[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const VERSION_ID = /^drive\.version\.[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 const CURSOR$1 = /^drive\.cursor\.v1\.[A-Za-z0-9_-]+$/;
 const AUTH_ID$1 = /^[A-Za-z0-9_-]{1,128}$/;
 const GRANT_ETAG = /^"drive\.permission-grant\.v1\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)"$/;
@@ -269,7 +295,8 @@ const EFFECTIVE_ACTIONS = Object.freeze([
 	"items:update"
 ]);
 const MAX_UPLOAD_BYTE_LENGTH$1 = 33554432e4;
-const UPLOAD_QUOTA_EXPIRY_MILLISECONDS = 864e5;
+const UPLOAD_PART_BYTE_LENGTH$1 = 32 * 1024 * 1024;
+const CONTENT_DIGEST$1 = /^sha256:[0-9a-f]{64}$/;
 function isCurrentWorkspace(value) {
 	if (!isExactRecord(value, [
 		"workspaceId",
@@ -350,18 +377,93 @@ function isEffectivePermissionResponse(value, targetItemId) {
 	}
 	return true;
 }
-function isUploadQuotaReservation(value) {
-	return isExactRecord(value, [
-		"workspaceId",
+function isUploadSession(value, expectedByteLength) {
+	if (!isExactRecord(value, [
+		"itemId",
+		"versionId",
 		"uploadId",
-		"parentItemId",
-		"expectedByteLength",
-		"state",
-		"terminalReason",
-		"createdAtEpochMilliseconds",
+		"mode",
+		"partByteLength",
+		"partCount",
+		"revision",
+		"expiresAtEpochMilliseconds"
+	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || value.partByteLength !== UPLOAD_PART_BYTE_LENGTH$1 || !isSafeInteger$1(value.partCount) || value.partCount > 1e4 || value.partCount !== Math.ceil(expectedByteLength / UPLOAD_PART_BYTE_LENGTH$1) || (expectedByteLength === 0 ? value.mode !== "server-mediated-zero-byte" : value.mode !== "presigned-multipart") || !isSafeInteger$1(value.revision) || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
+	Object.freeze(value);
+	return true;
+}
+function isUploadStatus(value, afterPartNumber, limit) {
+	if (!isExactRecord(value, [
+		"itemId",
+		"versionId",
+		"uploadId",
+		"mode",
+		"lifecycle",
+		"revision",
+		"partPolicy",
+		"confirmedParts",
+		"nextAfterPartNumber",
 		"expiresAtEpochMilliseconds",
-		"terminalAtEpochMilliseconds"
-	]) && typeof value.workspaceId === "string" && WORKSPACE_ID$1.test(value.workspaceId) && typeof value.uploadId === "string" && UPLOAD_ID$1.test(value.uploadId) && typeof value.parentItemId === "string" && ITEM_ID$1.test(value.parentItemId) && typeof value.expectedByteLength === "number" && Number.isSafeInteger(value.expectedByteLength) && value.expectedByteLength >= 0 && value.expectedByteLength <= MAX_UPLOAD_BYTE_LENGTH$1 && (value.state === "reserved" || value.state === "converted" || value.state === "released") && (value.terminalReason === null || value.terminalReason === "completed" || value.terminalReason === "aborted" || value.terminalReason === "failed" || value.terminalReason === "expired") && isSafeInteger$1(value.createdAtEpochMilliseconds) && isSafeInteger$1(value.expiresAtEpochMilliseconds) && value.expiresAtEpochMilliseconds - value.createdAtEpochMilliseconds === UPLOAD_QUOTA_EXPIRY_MILLISECONDS && (value.terminalAtEpochMilliseconds === null || isSafeInteger$1(value.terminalAtEpochMilliseconds) && value.terminalAtEpochMilliseconds >= value.createdAtEpochMilliseconds);
+		"ready"
+	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || ![
+		"initiating",
+		"recovery-required",
+		"uploading",
+		"completing",
+		"provider-completed",
+		"ready",
+		"aborting",
+		"aborted"
+	].includes(String(value.lifecycle)) || !isSafeInteger$1(value.revision) || !isExactRecord(value.partPolicy, [
+		"partByteLength",
+		"partCount",
+		"maxParts"
+	]) || value.partPolicy.partByteLength !== UPLOAD_PART_BYTE_LENGTH$1 || !isSafeInteger$1(value.partPolicy.partCount) || value.partPolicy.partCount > 1e4 || value.partPolicy.maxParts !== 1e4 || (value.mode === "server-mediated-zero-byte" ? value.partPolicy.partCount !== 0 : value.partPolicy.partCount < 1) || !Array.isArray(value.confirmedParts) || value.confirmedParts.length > limit || !isSafeInteger$1(value.expiresAtEpochMilliseconds)) return false;
+	let previousPartNumber = afterPartNumber;
+	for (const part of value.confirmedParts) {
+		if (!isExactRecord(part, ["partNumber", "checksumSha256"]) || !isSafeInteger$1(part.partNumber) || part.partNumber <= previousPartNumber || part.partNumber > value.partPolicy.partCount || !isPartChecksum$1(part.checksumSha256)) return false;
+		previousPartNumber = part.partNumber;
+	}
+	if (!(value.nextAfterPartNumber === null || isSafeInteger$1(value.nextAfterPartNumber) && value.confirmedParts.length === limit && value.nextAfterPartNumber === previousPartNumber) || value.mode === "server-mediated-zero-byte" && (value.confirmedParts.length !== 0 || value.nextAfterPartNumber !== null) || value.lifecycle === "ready" !== (value.ready !== null) || value.ready !== null && (!isReadyUpload(value.ready, { uploadId: value.uploadId }) || value.ready.itemId !== value.itemId || value.ready.versionId !== value.versionId)) return false;
+	Object.freeze(value.partPolicy);
+	for (const part of value.confirmedParts) Object.freeze(part);
+	Object.freeze(value.confirmedParts);
+	Object.freeze(value);
+	return true;
+}
+function isUploadPartDescriptor(value, expectedPartNumber, checksumSha256, allowInsecureHttp) {
+	if (!isExactRecord(value, [
+		"url",
+		"method",
+		"headers",
+		"partNumber",
+		"expectedByteLength",
+		"expiresAtEpochMilliseconds"
+	]) || !isSignedTransferUrl(value.url, allowInsecureHttp) || value.method !== "PUT" || !isExactRecord(value.headers, ["x-amz-checksum-sha256"]) || value.headers["x-amz-checksum-sha256"] !== checksumSha256 || value.partNumber !== expectedPartNumber || !isSafeInteger$1(value.expectedByteLength) || value.expectedByteLength < 1 || value.expectedByteLength > UPLOAD_PART_BYTE_LENGTH$1 || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
+	Object.freeze(value.headers);
+	Object.freeze(value);
+	return true;
+}
+function isUploadPartResult(value, expectedPartNumber, expectedUploadRevision) {
+	if (!isExactRecord(value, ["partNumber", "revision"]) || value.partNumber !== expectedPartNumber || value.revision !== expectedUploadRevision + 1 || !isSafeInteger$1(value.revision)) return false;
+	Object.freeze(value);
+	return true;
+}
+function isReadyUpload(value, expected) {
+	if (!isExactRecord(value, [
+		"itemId",
+		"versionId",
+		"uploadId",
+		"byteLength",
+		"callerDeclaredContentDigest",
+		"displayFilename",
+		"mediaType",
+		"state"
+	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID.test(value.versionId) || value.uploadId !== expected.uploadId || !isSafeInteger$1(value.byteLength) || value.byteLength < 0 || value.byteLength > MAX_UPLOAD_BYTE_LENGTH$1 || typeof value.callerDeclaredContentDigest !== "string" || !CONTENT_DIGEST$1.test(value.callerDeclaredContentDigest) || !isSafeFilename$1(value.displayFilename) || !isMediaType$1(value.mediaType) || value.state !== "ready" || expected.byteLength !== void 0 && value.byteLength !== expected.byteLength || expected.callerDeclaredContentDigest !== void 0 && value.callerDeclaredContentDigest !== expected.callerDeclaredContentDigest || expected.displayFilename !== void 0 && value.displayFilename !== expected.displayFilename || expected.mediaType !== void 0 && value.mediaType !== expected.mediaType) return false;
+	Object.freeze(value);
+	return true;
+}
+function isPartChecksum$1(value) {
+	return typeof value === "string" && /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/.test(value);
 }
 function mutationValidatorsAreCoherent(headers) {
 	const collection = headers.get("drive-permission-collection-etag");
@@ -418,6 +520,19 @@ function isSafeFilename$1(value) {
 	}
 	return true;
 }
+function isMediaType$1(value) {
+	return typeof value === "string" && value.length <= 255 && /^[a-z0-9](?:[a-z0-9!#$&^_.+-]{0,125}[a-z0-9])?\/[a-z0-9](?:[a-z0-9!#$&^_.+-]{0,125}[a-z0-9])?$/.test(value);
+}
+function isSignedTransferUrl(value, allowInsecureHttp) {
+	if (typeof value !== "string" || value.length < 1 || value.length > 8192 || value !== value.trim()) return false;
+	try {
+		const url = new URL(value);
+		const loopbackHost = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
+		return (url.protocol === "https:" || url.protocol === "http:" && allowInsecureHttp && loopbackHost) && url.username === "" && url.password === "" && url.hash === "" && url.host !== "";
+	} catch {
+		return false;
+	}
+}
 function filenameIsReserved$1(value) {
 	const base = value.split(".", 1)[0].toUpperCase();
 	return value === "." || value === ".." || [
@@ -457,7 +572,10 @@ const PERMISSION_ACTIONS = Object.freeze([
 	"items:update"
 ]);
 const IDEMPOTENCY_KEY = /^[A-Za-z0-9_-]{16,128}$/;
+const CONTENT_DIGEST = /^sha256:[0-9a-f]{64}$/;
+const PART_CHECKSUM = /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/;
 const MAX_UPLOAD_BYTE_LENGTH = 33554432e4;
+const UPLOAD_PART_BYTE_LENGTH = 32 * 1024 * 1024;
 function validateCurrentWorkspaceInput(value) {
 	const signal = validateSignal(captureRecord(value === void 0 ? {} : value, [], ["signal"]).signal);
 	return signal === void 0 ? {} : { signal };
@@ -596,28 +714,93 @@ function validateCreateUploadInput(value) {
 		"workspaceId",
 		"parentItemId",
 		"expectedByteLength",
+		"displayFilename",
+		"mediaType",
+		"callerDeclaredContentDigest",
+		"protectionClassification",
 		"idempotencyKey"
 	], ["signal"]);
 	const signal = validateSignal(input.signal);
-	if (typeof input.workspaceId !== "string" || !WORKSPACE_ID.test(input.workspaceId) || typeof input.parentItemId !== "string" || !ITEM_ID.test(input.parentItemId) || typeof input.expectedByteLength !== "number" || !Number.isSafeInteger(input.expectedByteLength) || input.expectedByteLength < 0 || input.expectedByteLength > MAX_UPLOAD_BYTE_LENGTH || !isIdempotencyKey(input.idempotencyKey)) throw new DriveError("invalid_input");
+	if (typeof input.workspaceId !== "string" || !WORKSPACE_ID.test(input.workspaceId) || typeof input.parentItemId !== "string" || !ITEM_ID.test(input.parentItemId) || typeof input.expectedByteLength !== "number" || !Number.isSafeInteger(input.expectedByteLength) || input.expectedByteLength < 0 || input.expectedByteLength > MAX_UPLOAD_BYTE_LENGTH || !isSafeFilename(input.displayFilename) || !isMediaType(input.mediaType) || typeof input.callerDeclaredContentDigest !== "string" || !CONTENT_DIGEST.test(input.callerDeclaredContentDigest) || input.protectionClassification !== "ordinary" && input.protectionClassification !== "opaque-encrypted" || !isIdempotencyKey(input.idempotencyKey)) throw new DriveError("invalid_input");
 	return {
 		workspaceId: input.workspaceId,
 		parentItemId: input.parentItemId,
 		expectedByteLength: input.expectedByteLength,
+		displayFilename: input.displayFilename,
+		mediaType: input.mediaType,
+		callerDeclaredContentDigest: input.callerDeclaredContentDigest,
+		protectionClassification: input.protectionClassification,
 		idempotencyKey: input.idempotencyKey,
 		...signal === void 0 ? {} : { signal }
 	};
 }
-function validateAbortUploadInput(value) {
-	const input = captureRecord(value, ["workspaceId", "uploadId"], ["signal"]);
-	const signal = validateSignal(input.signal);
-	if (typeof input.workspaceId !== "string" || !WORKSPACE_ID.test(input.workspaceId) || typeof input.uploadId !== "string" || !UPLOAD_ID.test(input.uploadId)) throw new DriveError("invalid_input");
+function validateGetUploadStatusInput(value) {
+	const input = captureRecord(value, ["workspaceId", "uploadId"], [
+		"afterPartNumber",
+		"limit",
+		"signal"
+	]);
+	const upload = validateUploadPath(input.workspaceId, input.uploadId, input.signal);
+	if (input.afterPartNumber !== void 0 && (!isSafeInteger(input.afterPartNumber) || input.afterPartNumber > 1e4) || input.limit !== void 0 && (!isSafeInteger(input.limit) || input.limit < 1 || input.limit > 100)) throw new DriveError("invalid_input");
 	return {
-		workspaceId: input.workspaceId,
-		uploadId: input.uploadId,
-		...signal === void 0 ? {} : { signal }
+		...upload,
+		...input.afterPartNumber === void 0 ? {} : { afterPartNumber: input.afterPartNumber },
+		...input.limit === void 0 ? {} : { limit: input.limit }
+	};
+}
+function validateCreateUploadPartDescriptorInput(value) {
+	const input = captureRecord(value, [
+		"workspaceId",
+		"uploadId",
+		"partNumber",
+		"checksumSha256"
+	], ["signal"]);
+	const upload = validateUploadPath(input.workspaceId, input.uploadId, input.signal);
+	if (!isPartNumber(input.partNumber) || !isPartChecksum(input.checksumSha256)) throw new DriveError("invalid_input");
+	return {
+		...upload,
+		partNumber: input.partNumber,
+		checksumSha256: input.checksumSha256
 	};
 }
+function validateRecordUploadPartInput(value) {
+	const input = captureRecord(value, [
+		"workspaceId",
+		"uploadId",
+		"partNumber",
+		"expectedUploadRevision",
+		"byteLength",
+		"etag",
+		"checksumSha256"
+	], ["signal"]);
+	const upload = validateUploadPath(input.workspaceId, input.uploadId, input.signal);
+	if (!isPartNumber(input.partNumber) || !isSafeInteger(input.expectedUploadRevision) || input.expectedUploadRevision >= Number.MAX_SAFE_INTEGER || !isSafeInteger(input.byteLength) || input.byteLength < 1 || input.byteLength > UPLOAD_PART_BYTE_LENGTH || !isEtag(input.etag) || !isPartChecksum(input.checksumSha256)) throw new DriveError("invalid_input");
+	return {
+		...upload,
+		partNumber: input.partNumber,
+		expectedUploadRevision: input.expectedUploadRevision,
+		byteLength: input.byteLength,
+		etag: input.etag,
+		checksumSha256: input.checksumSha256
+	};
+}
+function validateCompleteUploadInput(value) {
+	const input = captureRecord(value, [
+		"workspaceId",
+		"uploadId",
+		"idempotencyKey"
+	], ["signal"]);
+	const upload = validateUploadPath(input.workspaceId, input.uploadId, input.signal);
+	if (!isIdempotencyKey(input.idempotencyKey)) throw new DriveError("invalid_input");
+	return {
+		...upload,
+		idempotencyKey: input.idempotencyKey
+	};
+}
+function validateAbortUploadInput(value) {
+	const input = captureRecord(value, ["workspaceId", "uploadId"], ["signal"]);
+	return validateUploadPath(input.workspaceId, input.uploadId, input.signal);
+}
 function resourcePath(input) {
 	return {
 		workspaceId: input.workspaceId,
@@ -702,6 +885,27 @@ function captureArray(value) {
 function isIdempotencyKey(value) {
 	return typeof value === "string" && IDEMPOTENCY_KEY.test(value);
 }
+function validateUploadPath(workspaceId, uploadId, signalValue) {
+	const signal = validateSignal(signalValue);
+	if (typeof workspaceId !== "string" || !WORKSPACE_ID.test(workspaceId) || typeof uploadId !== "string" || !UPLOAD_ID.test(uploadId)) throw new DriveError("invalid_input");
+	return {
+		workspaceId,
+		uploadId,
+		...signal === void 0 ? {} : { signal }
+	};
+}
+function isPartNumber(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value >= 1 && value <= 1e4;
+}
+function isPartChecksum(value) {
+	return typeof value === "string" && PART_CHECKSUM.test(value);
+}
+function isEtag(value) {
+	return typeof value === "string" && value.length >= 1 && value.length <= 1024 && /^[\x20-\x7e]+$/.test(value);
+}
+function isMediaType(value) {
+	return typeof value === "string" && value.length <= 255 && /^[a-z0-9](?:[a-z0-9!#$&^_.+-]{0,125}[a-z0-9])?\/[a-z0-9](?:[a-z0-9!#$&^_.+-]{0,125}[a-z0-9])?$/.test(value);
+}
 function isExpiry(value) {
 	return value === null || isSafeInteger(value);
 }
@@ -1188,7 +1392,7 @@ async function execute(runtime, signal, preconditionStatus, send, successStatuse
 			signal: operationSignal
 		});
 		if (!capturedResponse) throw new DriveError("network_error");
-		return await parseResponse(capturedResponse, operationSignal, preconditionStatus, successStatuses, guard, allowsQuotaExceeded, allowedErrorCodes);
+		return guard === null ? await parseNoContentResponse(capturedResponse, operationSignal, preconditionStatus, successStatuses, allowedErrorCodes) : await parseResponse(capturedResponse, operationSignal, preconditionStatus, successStatuses, guard, allowsQuotaExceeded, allowedErrorCodes);
 	} catch (error) {
 		if (operation.didTimeout()) throw new DriveError("timeout");
 		if (error instanceof DriveError) throw error;
@@ -1276,8 +1480,35 @@ const CURRENT_WORKSPACE_ERROR_CODES = Object.freeze([
 	"invalid_request",
 	"service_unavailable"
 ]);
+const TRANSFER_ERROR_CODES = Object.freeze([
+	"authentication_required",
+	"identity_authority_unavailable",
+	"permission_denied",
+	"resource_not_found",
+	"invalid_request",
+	"precondition_failed",
+	"upload_recovery_required",
+	"service_unavailable"
+]);
+const STATUS_ERROR_CODES = Object.freeze([
+	"authentication_required",
+	"identity_authority_unavailable",
+	"permission_denied",
+	"resource_not_found",
+	"invalid_request",
+	"service_unavailable"
+]);
+const CREATE_UPLOAD_ERROR_CODES = Object.freeze([
+	...TRANSFER_ERROR_CODES,
+	"invalid_idempotency_key",
+	"idempotency_conflict",
+	"quota_exceeded"
+]);
+const COMPLETE_UPLOAD_ERROR_CODES = Object.freeze([...TRANSFER_ERROR_CODES, "invalid_idempotency_key"]);
 function createDriveClientInternal(config) {
-	const runtime = createClientRuntime(config);
+	return createDriveOperations(createClientRuntime(config));
+}
+function createDriveOperations(runtime) {
 	return Object.freeze({
 		getCurrentWorkspace: (input) => getCurrentWorkspace(runtime, input),
 		listFolderChildren: (input) => listFolderChildren(runtime, input),
@@ -1288,6 +1519,10 @@ function createDriveClientInternal(config) {
 		updateItemPermission: (input) => updateItemPermission(runtime, input),
 		revokeItemPermission: (input) => revokeItemPermission(runtime, input),
 		createUpload: (input) => createUpload(runtime, input),
+		getUploadStatus: (input) => getUploadStatus(runtime, input),
+		createUploadPartDescriptor: (input) => createUploadPartDescriptor(runtime, input),
+		recordUploadPart: (input) => recordUploadPart(runtime, input),
+		completeUpload: (input) => completeUpload(runtime, input),
 		abortUpload: (input) => abortUpload(runtime, input)
 	});
 }
@@ -1405,11 +1640,81 @@ async function createUpload(runtime, input) {
 			},
 			body: {
 				parentItemId: validated.parentItemId,
-				expectedByteLength: validated.expectedByteLength
+				expectedByteLength: validated.expectedByteLength,
+				displayFilename: validated.displayFilename,
+				mediaType: validated.mediaType,
+				callerDeclaredContentDigest: validated.callerDeclaredContentDigest,
+				protectionClassification: validated.protectionClassification
+			}
+		}),
+		...requestOptions
+	}), [200, 201], (value) => isUploadSession(value, validated.expectedByteLength), true, CREATE_UPLOAD_ERROR_CODES);
+}
+async function getUploadStatus(runtime, input) {
+	const validated = validateGetUploadStatusInput(input);
+	const afterPartNumber = validated.afterPartNumber ?? 0;
+	const limit = validated.limit ?? 100;
+	return execute(runtime, validated.signal, null, (api, requestOptions) => api.GET("/api/v1/workspaces/{workspaceId}/uploads/{uploadId}", {
+		...operationOptions("getUploadStatus", { params: {
+			path: {
+				workspaceId: validated.workspaceId,
+				uploadId: validated.uploadId
+			},
+			query: {
+				...validated.afterPartNumber === void 0 ? {} : { afterPartNumber: String(validated.afterPartNumber) },
+				...validated.limit === void 0 ? {} : { limit: String(validated.limit) }
+			}
+		} }),
+		...requestOptions
+	}), [200], (value) => isUploadStatus(value, afterPartNumber, limit), false, STATUS_ERROR_CODES);
+}
+async function createUploadPartDescriptor(runtime, input) {
+	const validated = validateCreateUploadPartDescriptorInput(input);
+	return execute(runtime, validated.signal, 409, (api, requestOptions) => api.POST("/api/v1/workspaces/{workspaceId}/uploads/{uploadId}/parts", {
+		...operationOptions("createUploadPartDescriptor", {
+			params: { path: {
+				workspaceId: validated.workspaceId,
+				uploadId: validated.uploadId
+			} },
+			body: {
+				partNumber: validated.partNumber,
+				checksumSha256: validated.checksumSha256
+			}
+		}),
+		...requestOptions
+	}), [200], (value) => isUploadPartDescriptor(value, validated.partNumber, validated.checksumSha256, new URL(runtime.baseUrl).protocol === "http:"), false, TRANSFER_ERROR_CODES);
+}
+async function recordUploadPart(runtime, input) {
+	const validated = validateRecordUploadPartInput(input);
+	return execute(runtime, validated.signal, 409, (api, requestOptions) => api.POST("/api/v1/workspaces/{workspaceId}/uploads/{uploadId}/parts/{partNumber}", {
+		...operationOptions("recordUploadPart", {
+			params: { path: {
+				workspaceId: validated.workspaceId,
+				uploadId: validated.uploadId,
+				partNumber: String(validated.partNumber)
+			} },
+			body: {
+				expectedUploadRevision: validated.expectedUploadRevision,
+				byteLength: validated.byteLength,
+				etag: validated.etag,
+				checksumSha256: validated.checksumSha256
 			}
 		}),
 		...requestOptions
-	}), [200, 201], (value) => isUploadQuotaReservation(value) && value.workspaceId === validated.workspaceId && value.parentItemId === validated.parentItemId && value.expectedByteLength === validated.expectedByteLength && value.state === "reserved" && value.terminalReason === null && value.terminalAtEpochMilliseconds === null, true);
+	}), [200], (value) => isUploadPartResult(value, validated.partNumber, validated.expectedUploadRevision), false, TRANSFER_ERROR_CODES);
+}
+async function completeUpload(runtime, input) {
+	const validated = validateCompleteUploadInput(input);
+	return execute(runtime, validated.signal, 409, (api, requestOptions) => api.POST("/api/v1/workspaces/{workspaceId}/uploads/{uploadId}/complete", {
+		...operationOptions("completeUpload", { params: {
+			path: {
+				workspaceId: validated.workspaceId,
+				uploadId: validated.uploadId
+			},
+			header: { "Idempotency-Key": validated.idempotencyKey }
+		} }),
+		...requestOptions
+	}), [200], (value) => isReadyUpload(value, { uploadId: validated.uploadId }), false, COMPLETE_UPLOAD_ERROR_CODES);
 }
 async function abortUpload(runtime, input) {
 	const validated = validateAbortUploadInput(input);
@@ -1419,7 +1724,7 @@ async function abortUpload(runtime, input) {
 			uploadId: validated.uploadId
 		} } }),
 		...requestOptions
-	}), [200], (value) => isUploadQuotaReservation(value) && value.workspaceId === validated.workspaceId && value.uploadId === validated.uploadId && value.state === "released" && value.terminalReason === "aborted" && value.terminalAtEpochMilliseconds !== null);
+	}), [204], null, false, TRANSFER_ERROR_CODES);
 }
 //#endregion
 //#region src/server.ts

package/dist/types.d.ts

@@ -1,2 +1,2 @@
-import { A as UploadQuotaReservation, C as PermissionGrantee, D as ReservedUploadQuota, E as ReadEffectiveItemPermissionsInput, O as RevokeItemPermissionInput, S as PermissionGrant, T as PermissionPage, _ as FolderPage, a as CreateUploadInput, b as ListItemPermissionsInput, c as DriveClientConfig, d as DriveOperationResult, f as DriveResponseValidators, g as FolderItem, h as EffectivePermissionResponse, i as CreateItemPermissionInput, k as UpdateItemPermissionInput, l as DriveCredentialContext, m as EffectivePermissionAction, n as AbortedUploadQuota, o as CurrentWorkspace, p as DriveServerClientConfig, r as CreateFolderInput, s as DriveClient, t as AbortUploadInput, u as DriveCredentialProvider, v as GetCurrentWorkspaceInput, w as PermissionMutation, x as PermissionAction, y as ListFolderChildrenInput } from "./contract.js";
-export { AbortUploadInput, AbortedUploadQuota, CreateFolderInput, CreateItemPermissionInput, CreateUploadInput, CurrentWorkspace, DriveClient, DriveClientConfig, DriveCredentialContext, DriveCredentialProvider, DriveOperationResult, DriveResponseValidators, DriveServerClientConfig, EffectivePermissionAction, EffectivePermissionResponse, FolderItem, FolderPage, GetCurrentWorkspaceInput, ListFolderChildrenInput, ListItemPermissionsInput, PermissionAction, PermissionGrant, PermissionGrantee, PermissionMutation, PermissionPage, ReadEffectiveItemPermissionsInput, ReservedUploadQuota, RevokeItemPermissionInput, UpdateItemPermissionInput, UploadQuotaReservation };
+import { A as ProtectionClassification, B as UploadFileProgressCallback, C as ListFolderChildrenInput, D as PermissionGrantee, E as PermissionGrant, F as UpdateItemPermissionInput, H as UploadPartResult, I as UploadConfirmedPart, L as UploadFileInput, M as ReadyUpload, N as RecordUploadPartInput, O as PermissionMutation, P as RevokeItemPermissionInput, R as UploadFilePhase, S as GetUploadStatusInput, T as PermissionAction, U as UploadSession, V as UploadPartDescriptor, W as UploadStatus, _ as EffectivePermissionAction, a as CreateUploadInput, b as FolderPage, c as DriveClient, d as DriveCredentialProvider, f as DriveOperationResult, g as DriveServerClientConfig, h as DriveServerClient, i as CreateItemPermissionInput, j as ReadEffectiveItemPermissionsInput, k as PermissionPage, l as DriveClientConfig, m as DriveResponseValidators, n as CompleteUploadInput, o as CreateUploadPartDescriptorInput, p as DriveOperations, r as CreateFolderInput, s as CurrentWorkspace, t as AbortUploadInput, u as DriveCredentialContext, v as EffectivePermissionResponse, w as ListItemPermissionsInput, x as GetCurrentWorkspaceInput, y as FolderItem, z as UploadFileProgress } from "./contract.js";
+export { AbortUploadInput, CompleteUploadInput, CreateFolderInput, CreateItemPermissionInput, CreateUploadInput, CreateUploadPartDescriptorInput, CurrentWorkspace, DriveClient, DriveClientConfig, DriveCredentialContext, DriveCredentialProvider, DriveOperationResult, DriveOperations, DriveResponseValidators, DriveServerClient, DriveServerClientConfig, EffectivePermissionAction, EffectivePermissionResponse, FolderItem, FolderPage, GetCurrentWorkspaceInput, GetUploadStatusInput, ListFolderChildrenInput, ListItemPermissionsInput, PermissionAction, PermissionGrant, PermissionGrantee, PermissionMutation, PermissionPage, ProtectionClassification, ReadEffectiveItemPermissionsInput, ReadyUpload, RecordUploadPartInput, RevokeItemPermissionInput, UpdateItemPermissionInput, UploadConfirmedPart, UploadFileInput, UploadFilePhase, UploadFileProgress, UploadFileProgressCallback, UploadPartDescriptor, UploadPartResult, UploadSession, UploadStatus };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finueva/drive",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Public browser, Worker, and Node client for Finueva Drive",
   "type": "module",
   "types": "./dist/index.d.ts",
@@ -52,9 +52,10 @@
     "generate": "node scripts/openapi/generate.mjs",
     "check:generated": "node scripts/openapi/generate.mjs verify",
     "prepack": "pnpm build",
-    "test": "node scripts/quality/source.mjs && pnpm check:generated && pnpm test:package",
+    "test": "node scripts/quality/source.mjs && pnpm test:unit && pnpm check:generated && pnpm test:package",
     "test:artifact": "node scripts/package/artifact.mjs",
     "test:package": "node scripts/package/qualify.mjs",
+    "test:unit": "node scripts/quality/unit.mjs",
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
@@ -68,5 +69,8 @@
     "rolldown-plugin-dts": "0.27.14",
     "typescript": "5.9.3",
     "ufo": "1.6.4"
+  },
+  "dependencies": {
+    "@noble/hashes": "2.3.0"
   }
 }