@finueva/drive 0.2.0 → 0.5.0

package/dist/contract.d.ts

@@ -132,6 +132,547 @@ interface operations {
       };
     };
   };
+  getItem: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The active managed item and current published version metadata. */
+      200: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            currentVersion: {
+              byteLength: number;
+              mediaType: string;
+              /** @enum {string} */
+              protectionClassification: "ordinary" | "opaque-encrypted";
+              /** @enum {string} */
+              state: "current";
+              versionId: string;
+            } | null;
+            itemId: string;
+            /** @enum {string} */
+            lifecycleState: "active";
+            name: string;
+            parentId: string | null;
+            revision: number;
+            /** @enum {string} */
+            type: "file" | "folder";
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Managed storage is disabled for the discoverable item. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item is absent, undiscoverable, tombstoned, or unpublished. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Authorization or metadata changed after preflight. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, or unexpected body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  deleteItem: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The retained deletion result was exactly replayed. */
+      200: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description Deletion was retained and bounded reconciliation was attempted. */
+      202: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this lifecycle action. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item or destination is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, key, or strict body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  updateItem: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          name: string;
+          parentItemId: string;
+        };
+      };
+    };
+    responses: {
+      /** @description The managed item was updated or exactly replayed. */
+      200: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this lifecycle action. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item or destination is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, key, or strict body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
   listFolderChildren: {
     parameters: {
       query?: {
@@ -147,7 +688,1952 @@ interface operations {
     };
     requestBody?: never;
     responses: {
-      /** @description At most 50 active children in stable item-ID order. */
+      /** @description At most 50 active children in stable item-ID order. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            items: {
+              itemId: string;
+              /** @enum {string} */
+              kind: "file" | "folder";
+              /**
+               * Format: finueva-safe-filename
+               * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+               */
+              name: string;
+              parentItemId: string;
+              revision: number;
+              /** @enum {string} */
+              visibility: "workspace" | "restricted";
+              volumeId: string;
+              workspaceId: string;
+            }[];
+            nextCursor: string | null;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Managed storage is disabled for the canonical workspace entitlement. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The parent is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Folder authority changed after preflight. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, or cursor is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_pagination_cursor";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The pagination cursor is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity authority, D1, authorization evidence, or required cursor keys are unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  createFolder: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          /**
+           * Format: finueva-safe-filename
+           * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+           */
+          name: string;
+        };
+      };
+    };
+    responses: {
+      /** @description The exact committed folder is replayed. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            /**
+             * Format: finueva-safe-filename
+             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+             */
+            name: string;
+            parentItemId: string;
+            revision: number;
+            /** @enum {string} */
+            visibility: "workspace" | "restricted";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description The folder is committed. */
+      201: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            /**
+             * Format: finueva-safe-filename
+             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+             */
+            name: string;
+            parentItemId: string;
+            revision: number;
+            /** @enum {string} */
+            visibility: "workspace" | "restricted";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable parent does not permit folder creation. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The parent is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The idempotency key conflicts or folder authority changed after preflight. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, idempotency key, body, or name is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity authority, D1, authorization evidence, or trusted capacity evidence is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  createDownload: {
+    parameters: {
+      query?: {
+        versionId?: string;
+      };
+      header: {
+        "Idempotency-Key": string;
+        "Download-Method"?: string;
+        Range?: string;
+        "If-Match"?: string;
+        "If-None-Match"?: string;
+        "If-Range"?: string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description A short-lived immutable archive capability. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            expiresAtEpochMilliseconds: number;
+            headers: {
+              [key: string]: string;
+            };
+            /** @enum {string} */
+            method: "GET" | "HEAD";
+            /** @enum {string} */
+            mode: "presigned-single";
+            response: {
+              /** @enum {string} */
+              acceptRanges: "bytes";
+              byteLength: number;
+              contentDisposition: string;
+              contentLength: number;
+              contentRange: string | null;
+              contentType: string;
+              etag: string;
+              status: 200 | 206;
+              versionId: string;
+            };
+            /** Format: uri */
+            url: string;
+          };
+        };
+      };
+      /** @description One idempotent cold archive retrieval operation. */
+      202: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            /** @enum {string} */
+            mode: "restore-pending";
+            operationId: string;
+            pollAfterSeconds: number;
+            /** @enum {string} */
+            state: "pending" | "restoring";
+            versionId: string;
+          };
+        };
+      };
+      /** @description The selected immutable representation is not modified. */
+      304: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The visible file cannot be downloaded under current authority. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The file or selected version is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The retrieval key conflicts or immutable authority changed after preflight. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description A content entity-tag precondition failed. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The valid single range does not overlap the representation. */
+      416: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "range_not_satisfiable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, or unexpected body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              message: string;
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  listItemPermissions: {
+    parameters: {
+      query?: {
+        limit?: number;
+        cursor?: string;
+      };
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description A stable permission page. */
+      200: {
+        headers: {
+          /** @description Current direct collection precondition for POST on this item. */
+          "Drive-Permission-Collection-ETag"?: string;
+          /** @description Strong validator for the exact returned permission-list representation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            collectionEtag: string;
+            collectionRevision: number;
+            items: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              etag: string;
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct" | "inherited";
+              sourceItemId: string;
+            }[];
+            nextCursor: string | null;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this permission operation. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The supplied revision or post-preflight authority is stale. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, or pagination cursor are invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_pagination_cursor";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The pagination cursor is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  createItemPermission: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+          expiresAtEpochMilliseconds: number | null;
+          grantee: {
+            /** @enum {string} */
+            type: "user";
+            userId: string;
+          } | {
+            teamId: string;
+            /** @enum {string} */
+            type: "team";
+          };
+        };
+      };
+    };
+    responses: {
+      /** @description The exact committed result was replayed. */
+      200: {
+        headers: {
+          /** @description Current direct collection precondition for the next POST. */
+          "Drive-Permission-Collection-ETag"?: string;
+          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
+          "Drive-Permission-Grant-ETag"?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            collectionRevision: number;
+            grant: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct";
+              sourceItemId: string;
+            };
+            /** @enum {string} */
+            outcome: "committed" | "replayed";
+          };
+        };
+      };
+      /** @description The direct grant was committed. */
+      201: {
+        headers: {
+          /** @description Current direct collection precondition for the next POST. */
+          "Drive-Permission-Collection-ETag"?: string;
+          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
+          "Drive-Permission-Grant-ETag"?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            collectionRevision: number;
+            grant: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct";
+              sourceItemId: string;
+            };
+            /** @enum {string} */
+            outcome: "committed" | "replayed";
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this permission operation. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The idempotency key was reused for a different semantic request. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The supplied revision or post-preflight authority is stale. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  readEffectiveItemPermissions: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description All seven caller-specific item actions. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            actions: {
+              /** @enum {string} */
+              action: "items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:manage" | "items:permissions:read" | "items:update";
+              allowed: boolean;
+              /** @enum {string|null} */
+              basis: "workspace_visibility" | "restricted_administrator_bypass" | "direct_grant" | "inherited_grant" | null;
+              grantId: string | null;
+              sourceItemId: string | null;
+            }[] & (unknown & unknown & unknown & unknown & unknown & unknown & unknown);
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this permission operation. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The supplied revision or post-preflight authority is stale. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, or body are invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  revokeItemPermission: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+        grantId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The retained revoked grant was committed, replayed, or unchanged. */
+      200: {
+        headers: {
+          /** @description Current direct collection precondition for POST. */
+          "Drive-Permission-Collection-ETag"?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            collectionRevision: number;
+            grant: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct";
+              sourceItemId: string;
+            };
+            /** @enum {string} */
+            outcome: "committed" | "replayed";
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this permission operation. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The idempotency key was reused for a different semantic request. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The supplied revision or post-preflight authority is stale. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  updateItemPermission: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+        grantId: string;
+      };
+      cookie?: never;
+    };
+    requestBody: {
+      content: {
+        "application/json": {
+          actions?: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+          expiresAtEpochMilliseconds?: number | null;
+        };
+      };
+    };
+    responses: {
+      /** @description The direct grant was committed or replayed. */
+      200: {
+        headers: {
+          /** @description Current direct collection precondition for POST. */
+          "Drive-Permission-Collection-ETag"?: string;
+          /** @description Current direct-grant precondition for the next PATCH or DELETE; omitted when the current row is not mutable. */
+          "Drive-Permission-Grant-ETag"?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            collectionRevision: number;
+            grant: {
+              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
+              /** @enum {string} */
+              availability: "active" | "expired" | "revoked";
+              expiresAtEpochMilliseconds: number | null;
+              grantId: string;
+              grantee: {
+                /** @enum {string} */
+                type: "user";
+                userId: string;
+              } | {
+                teamId: string;
+                /** @enum {string} */
+                type: "team";
+              };
+              revision: number;
+              /** @enum {string} */
+              source: "direct";
+              sourceItemId: string;
+            };
+            /** @enum {string} */
+            outcome: "committed" | "replayed";
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this permission operation. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The idempotency key was reused for a different semantic request. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The supplied revision or post-preflight authority is stale. */
+      412: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  restoreItem: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The managed item was restored or exactly replayed. */
+      200: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this lifecycle action. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item or destination is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, key, or strict body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  trashItem: {
+    parameters: {
+      query?: never;
+      header: {
+        "Idempotency-Key": string;
+        "If-Match": string;
+      };
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The managed item was trashed or exactly replayed. */
+      200: {
+        headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            itemId: string;
+            /** @enum {string} */
+            kind: "file" | "folder";
+            name: string;
+            parentItemId: string;
+            purgeAfterEpochMilliseconds: number | null;
+            revision: number;
+            /** @enum {string} */
+            state: "active" | "trashed" | "deleting";
+            volumeId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The discoverable item does not permit this lifecycle action. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The item or destination is absent or undiscoverable. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "idempotency_conflict";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key conflicts with an earlier request.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, headers, key, or strict body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "invalid_idempotency_key";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The idempotency key is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "service_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The service is temporarily unavailable.";
+              requestId: string;
+            };
+          };
+        };
+      };
+    };
+  };
+  listItemVersions: {
+    parameters: {
+      query?: {
+        limit?: number;
+        cursor?: string;
+      };
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description At most 50 versions in version-ID order with an opaque 15-minute continuation cursor. */
       200: {
         headers: {
           [name: string]: unknown;
@@ -155,20 +2641,22 @@ interface operations {
         content: {
           "application/json": {
             items: {
-              itemId: string;
               /** @enum {string} */
-              kind: "file" | "folder";
+              archiveState: "available" | "cold" | "restoring" | "unavailable" | "corrupt";
+              byteLength: number;
+              contentDigest: string;
               /**
                * Format: finueva-safe-filename
-               * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
+               * @description Custom format finueva-safe-filename requires NFC normalization and at most 255 UTF-8 bytes in addition to the structural pattern and maxLength constraints. Dot entries and Windows reserved base names are forbidden. Generated JSON Schema constraints are a necessary structural subset and do not independently enforce normalization or UTF-8 byte length.
                */
-              name: string;
-              parentItemId: string;
+              displayFilename: string;
+              mediaType: string;
+              /** @enum {string} */
+              protectionClassification: "ordinary" | "opaque-encrypted";
               revision: number;
               /** @enum {string} */
-              visibility: "workspace" | "restricted";
-              volumeId: string;
-              workspaceId: string;
+              state: "current" | "superseded";
+              versionId: string;
             }[];
             nextCursor: string | null;
           };
@@ -192,7 +2680,7 @@ interface operations {
           };
         };
       };
-      /** @description Managed storage is disabled for the canonical workspace entitlement. */
+      /** @description The discoverable item does not permit metadata reads. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -210,7 +2698,7 @@ interface operations {
           };
         };
       };
-      /** @description The parent is absent or undiscoverable. */
+      /** @description The file is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -228,7 +2716,7 @@ interface operations {
           };
         };
       };
-      /** @description Folder authority changed after preflight. */
+      /** @description Authorization changed after preflight. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -246,7 +2734,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, or cursor is invalid. */
+      /** @description The path, query, duplicate query key, or unexpected body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -261,19 +2749,170 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
+          };
+        };
+      };
+      /** @description Identity, D1, or authorization authority is unavailable. */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "identity_authority_unavailable";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is temporarily unavailable.";
+              requestId: string;
+            };
           } | {
             error: {
               /** @enum {string} */
-              code: "invalid_pagination_cursor";
+              code: "service_unavailable";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The pagination cursor is invalid.";
+              message: "The service is temporarily unavailable.";
               requestId: string;
             };
           };
         };
       };
-      /** @description Identity authority, D1, authorization evidence, or required cursor keys are unavailable. */
+    };
+  };
+  getItemVersion: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        workspaceId: string;
+        itemId: string;
+        versionId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description The exact workspace/item-bound immutable managed file version. */
+      200: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            /** @enum {string} */
+            archiveState: "available" | "cold" | "restoring" | "unavailable" | "corrupt";
+            byteLength: number;
+            contentDigest: string;
+            /**
+             * Format: finueva-safe-filename
+             * @description Custom format finueva-safe-filename requires NFC normalization and at most 255 UTF-8 bytes in addition to the structural pattern and maxLength constraints. Dot entries and Windows reserved base names are forbidden. Generated JSON Schema constraints are a necessary structural subset and do not independently enforce normalization or UTF-8 byte length.
+             */
+            displayFilename: string;
+            itemId: string;
+            mediaType: string;
+            /** @enum {string} */
+            protectionClassification: "ordinary" | "opaque-encrypted";
+            revision: number;
+            /** @enum {string} */
+            state: "current" | "superseded";
+            versionId: string;
+            workspaceId: string;
+          };
+        };
+      };
+      /** @description A valid Drive user bearer credential is required. */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "authentication_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "Authentication is required.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Managed storage is disabled for the discoverable file. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "permission_denied";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested action is not permitted.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The file or version is absent, undiscoverable, unpublished, or deleting. */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "resource_not_found";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The requested resource was not found.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Authorization or version metadata changed after preflight. */
+      409: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "precondition_failed";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request precondition failed.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description The path, query, or unexpected body is invalid. */
+      422: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content: {
+          "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "invalid_request";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The request is invalid.";
+              requestId: string;
+            };
+          };
+        };
+      };
+      /** @description Identity, D1, authorization, capacity, or managed authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -302,75 +2941,33 @@ interface operations {
       };
     };
   };
-  createFolder: {
+  restoreItemVersion: {
     parameters: {
       query?: never;
       header: {
         "Idempotency-Key": string;
+        "If-Match": string;
       };
       path: {
         workspaceId: string;
-        itemId: string;
-      };
-      cookie?: never;
-    };
-    requestBody: {
-      content: {
-        "application/json": {
-          /**
-           * Format: finueva-safe-filename
-           * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
-           */
-          name: string;
-        };
+        itemId: string;
+        versionId: string;
       };
+      cookie?: never;
     };
+    requestBody?: never;
     responses: {
-      /** @description The exact committed folder is replayed. */
+      /** @description The selected version is current or the exact result was replayed. */
       200: {
         headers: {
+          /** @description Strong precondition for the next item mutation. */
+          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            itemId: string;
-            /** @enum {string} */
-            kind: "file" | "folder";
-            /**
-             * Format: finueva-safe-filename
-             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
-             */
-            name: string;
-            parentItemId: string;
-            revision: number;
-            /** @enum {string} */
-            visibility: "workspace" | "restricted";
-            volumeId: string;
-            workspaceId: string;
-          };
-        };
-      };
-      /** @description The folder is committed. */
-      201: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            itemId: string;
-            /** @enum {string} */
-            kind: "file" | "folder";
-            /**
-             * Format: finueva-safe-filename
-             * @description NFC-normalized filename of at most 255 Unicode code points and 255 UTF-8 bytes. Slash, backslash, control characters, U+2028/U+2029, trailing dot/space, dot entries, and Windows reserved base names are forbidden.
-             */
-            name: string;
-            parentItemId: string;
-            revision: number;
-            /** @enum {string} */
-            visibility: "workspace" | "restricted";
-            volumeId: string;
-            workspaceId: string;
+            currentVersionId: string;
+            itemRevision: number;
           };
         };
       };
@@ -392,7 +2989,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable parent does not permit folder creation. */
+      /** @description The discoverable item does not permit this lifecycle action. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -410,7 +3007,7 @@ interface operations {
           };
         };
       };
-      /** @description The parent is absent or undiscoverable. */
+      /** @description The item or destination is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -428,7 +3025,7 @@ interface operations {
           };
         };
       };
-      /** @description The idempotency key conflicts or folder authority changed after preflight. */
+      /** @description The key conflicts, the precondition is stale, or lifecycle authority changed. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -455,7 +3052,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, idempotency key, body, or name is invalid. */
+      /** @description The path, query, headers, key, or strict body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -482,7 +3079,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity authority, D1, authorization evidence, or trusted capacity evidence is unavailable. */
+      /** @description Identity, D1, authorization, capacity, or archive authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -511,54 +3108,51 @@ interface operations {
       };
     };
   };
-  listItemPermissions: {
+  searchWorkspaceItems: {
     parameters: {
-      query?: {
+      query: {
+        /** @description NFC, case-sensitive display-name prefix of at most 64 Unicode code points and 255 UTF-8 bytes. */
+        query: string;
         limit?: number;
         cursor?: string;
       };
       header?: never;
       path: {
         workspaceId: string;
-        itemId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description A stable permission page. */
+      /** @description At most 50 authorized managed items in binary display-name and item-ID order. */
       200: {
         headers: {
-          /** @description Current direct collection precondition for POST on this item. */
-          "Drive-Permission-Collection-ETag"?: string;
-          /** @description Strong validator for the exact returned permission-list representation. */
-          ETag?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            collectionEtag: string;
-            collectionRevision: number;
             items: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              etag: string;
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
+              currentVersion: {
+                byteLength: number;
+                mediaType: string;
                 /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
+                protectionClassification: "ordinary" | "opaque-encrypted";
                 /** @enum {string} */
-                type: "team";
-              };
+                state: "current";
+                versionId: string;
+              } | null;
+              itemId: string;
+              /** @enum {string} */
+              lifecycleState: "active";
+              name: string;
+              parentId: string | null;
+              /** @enum {string} */
+              provider: "managed";
               revision: number;
               /** @enum {string} */
-              source: "direct" | "inherited";
-              sourceItemId: string;
+              type: "file" | "folder";
+              volumeId: string;
+              workspaceId: string;
             }[];
             nextCursor: string | null;
           };
@@ -582,7 +3176,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description Managed storage is disabled for the selected workspace. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -600,7 +3194,7 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The selected workspace is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -618,8 +3212,8 @@ interface operations {
           };
         };
       };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
+      /** @description Workspace, cursor anchor, or item authority changed during the search. */
+      409: {
         headers: {
           [name: string]: unknown;
         };
@@ -636,7 +3230,7 @@ interface operations {
           };
         };
       };
-      /** @description The path, query, headers, or pagination cursor are invalid. */
+      /** @description The path, query, body, or cursor is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -663,7 +3257,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity authority, D1, exact authorization, audit capacity, or cursor keys are unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -692,108 +3286,69 @@ interface operations {
       };
     };
   };
-  createItemPermission: {
+  createUpload: {
     parameters: {
       query?: never;
       header: {
         "Idempotency-Key": string;
-        "If-Match": string;
       };
       path: {
         workspaceId: string;
-        itemId: string;
       };
       cookie?: never;
     };
     requestBody: {
       content: {
         "application/json": {
-          actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-          expiresAtEpochMilliseconds: number | null;
-          grantee: {
-            /** @enum {string} */
-            type: "user";
-            userId: string;
-          } | {
-            teamId: string;
-            /** @enum {string} */
-            type: "team";
-          };
+          /** @description Caller-declared whole-file SHA-256 metadata; it is not archive verification evidence. */
+          callerDeclaredContentDigest: string;
+          displayFilename: string;
+          expectedByteLength: number;
+          mediaType: string;
+          parentItemId: string;
+          /** @enum {string} */
+          protectionClassification: "ordinary" | "opaque-encrypted";
         };
       };
     };
     responses: {
-      /** @description The exact committed result was replayed. */
+      /** @description The exact retained transfer session is replayed. */
       200: {
         headers: {
-          /** @description Current direct collection precondition for the next POST. */
-          "Drive-Permission-Collection-ETag"?: string;
-          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
-          "Drive-Permission-Grant-ETag"?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            collectionRevision: number;
-            grant: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
-              revision: number;
-              /** @enum {string} */
-              source: "direct";
-              sourceItemId: string;
-            };
+            expiresAtEpochMilliseconds: number;
+            itemId: string;
             /** @enum {string} */
-            outcome: "committed" | "replayed";
+            mode: "presigned-multipart" | "server-mediated-zero-byte";
+            /** @enum {number} */
+            partByteLength: 33554432;
+            partCount: number;
+            revision: number;
+            uploadId: string;
+            versionId: string;
           };
         };
       };
-      /** @description The direct grant was committed. */
+      /** @description The durable direct transfer session is created. */
       201: {
         headers: {
-          /** @description Current direct collection precondition for the next POST. */
-          "Drive-Permission-Collection-ETag"?: string;
-          /** @description Current direct-grant precondition for PATCH or DELETE; omitted when the current row is not mutable. */
-          "Drive-Permission-Grant-ETag"?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            collectionRevision: number;
-            grant: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
-              revision: number;
-              /** @enum {string} */
-              source: "direct";
-              sourceItemId: string;
-            };
+            expiresAtEpochMilliseconds: number;
+            itemId: string;
             /** @enum {string} */
-            outcome: "committed" | "replayed";
+            mode: "presigned-multipart" | "server-mediated-zero-byte";
+            /** @enum {number} */
+            partByteLength: 33554432;
+            partCount: number;
+            revision: number;
+            uploadId: string;
+            versionId: string;
           };
         };
       };
@@ -815,7 +3370,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description Managed storage is disabled or the discoverable parent does not permit item creation. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -833,7 +3388,7 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The parent is absent or undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -851,13 +3406,22 @@ interface operations {
           };
         };
       };
-      /** @description The idempotency key was reused for a different semantic request. */
+      /** @description Quota is exceeded, the key conflicts, authority changed, or provider-create recovery is required. */
       409: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
+            error: {
+              /** @enum {string} */
+              code: "quota_exceeded";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The workspace storage quota would be exceeded.";
+              requestId: string;
+            };
+          } | {
             error: {
               /** @enum {string} */
               code: "idempotency_conflict";
@@ -866,16 +3430,7 @@ interface operations {
               message: "The idempotency key conflicts with an earlier request.";
               requestId: string;
             };
-          };
-        };
-      };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
+          } | {
             error: {
               /** @enum {string} */
               code: "precondition_failed";
@@ -884,10 +3439,19 @@ interface operations {
               message: "The request precondition failed.";
               requestId: string;
             };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "upload_recovery_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The upload requires recovery before it can continue.";
+              requestId: string;
+            };
           };
         };
       };
-      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      /** @description The path, key, media type, or strict request body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -914,7 +3478,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity, D1, authorization, entitlement, or trusted capacity authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -943,38 +3507,65 @@ interface operations {
       };
     };
   };
-  readEffectiveItemPermissions: {
+  getUploadStatus: {
     parameters: {
-      query?: never;
+      query?: {
+        afterPartNumber?: string;
+        limit?: string;
+      };
       header?: never;
       path: {
         workspaceId: string;
-        itemId: string;
+        uploadId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description All seven caller-specific item actions. */
+      /** @description The current upload lifecycle and one bounded confirmed-part page. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            actions: {
+            confirmedParts: {
+              checksumSha256: string;
+              partNumber: number;
+            }[];
+            expiresAtEpochMilliseconds: number;
+            itemId: string;
+            /** @enum {string} */
+            lifecycle: "initiating" | "recovery-required" | "uploading" | "completing" | "provider-completed" | "ready" | "aborting" | "aborted";
+            /** @enum {string} */
+            mode: "presigned-multipart" | "server-mediated-zero-byte";
+            nextAfterPartNumber: number | null;
+            partPolicy: {
+              /** @enum {number} */
+              maxParts: 10000;
+              /** @enum {number} */
+              partByteLength: 33554432;
+              partCount: number;
+            };
+            ready: {
+              byteLength: number;
+              /** @description Caller-declared whole-file SHA-256 metadata; archive publication is gated by provider checksum evidence. */
+              callerDeclaredContentDigest: string;
+              displayFilename: string;
+              itemId: string;
+              mediaType: string;
               /** @enum {string} */
-              action: "items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:manage" | "items:permissions:read" | "items:update";
-              allowed: boolean;
-              /** @enum {string|null} */
-              basis: "workspace_visibility" | "restricted_administrator_bypass" | "direct_grant" | "inherited_grant" | null;
-              grantId: string | null;
-              sourceItemId: string | null;
-            }[] & (unknown & unknown & unknown & unknown & unknown & unknown & unknown);
+              state: "ready";
+              uploadId: string;
+              versionId: string;
+            } | null;
+            revision: number;
+            uploadId: string;
+            versionId: string;
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
+      /** @description Authentication is required. */
       401: {
         headers: {
           [name: string]: unknown;
@@ -992,7 +3583,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description Permission is denied. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1010,7 +3601,7 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The upload is not discoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1028,25 +3619,7 @@ interface operations {
           };
         };
       };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            error: {
-              /** @enum {string} */
-              code: "precondition_failed";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The request precondition failed.";
-              requestId: string;
-            };
-          };
-        };
-      };
-      /** @description The path, query, headers, or body are invalid. */
+      /** @description The path, query, or unexpected request body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1064,7 +3637,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity or the service is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1093,56 +3666,24 @@ interface operations {
       };
     };
   };
-  revokeItemPermission: {
-    parameters: {
-      query?: never;
-      header: {
-        "Idempotency-Key": string;
-        "If-Match": string;
-      };
+  abortUpload: {
+    parameters: {
+      query?: never;
+      header?: never;
       path: {
         workspaceId: string;
-        itemId: string;
-        grantId: string;
+        uploadId: string;
       };
       cookie?: never;
     };
     requestBody?: never;
     responses: {
-      /** @description The retained revoked grant was committed, replayed, or unchanged. */
-      200: {
+      /** @description The provider upload is absent and the upload is terminal. */
+      204: {
         headers: {
-          /** @description Current direct collection precondition for POST. */
-          "Drive-Permission-Collection-ETag"?: string;
           [name: string]: unknown;
         };
-        content: {
-          "application/json": {
-            collectionRevision: number;
-            grant: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
-              revision: number;
-              /** @enum {string} */
-              source: "direct";
-              sourceItemId: string;
-            };
-            /** @enum {string} */
-            outcome: "committed" | "replayed";
-          };
-        };
+        content?: never;
       };
       /** @description A valid Drive user bearer credential is required. */
       401: {
@@ -1162,7 +3703,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description The retained parent is discoverable but no longer permits item creation. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1180,7 +3721,7 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The upload is unknown, cross-workspace, or its retained parent is undiscoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1198,7 +3739,7 @@ interface operations {
           };
         };
       };
-      /** @description The idempotency key was reused for a different semantic request. */
+      /** @description Another terminal settlement won, authority changed, or provider-create recovery is required. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -1207,34 +3748,25 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "idempotency_conflict";
+              code: "precondition_failed";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
+              message: "The request precondition failed.";
               requestId: string;
             };
-          };
-        };
-      };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
+          } | {
             error: {
               /** @enum {string} */
-              code: "precondition_failed";
+              code: "upload_recovery_required";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The request precondition failed.";
+              message: "The upload requires recovery before it can continue.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      /** @description The path, query, or unexpected request body is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1249,19 +3781,10 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "invalid_idempotency_key";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key is invalid.";
-              requestId: string;
-            };
           };
         };
       };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity, D1, authorization, or retained capacity authority is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1290,67 +3813,41 @@ interface operations {
       };
     };
   };
-  updateItemPermission: {
+  completeUpload: {
     parameters: {
       query?: never;
       header: {
         "Idempotency-Key": string;
-        "If-Match": string;
       };
       path: {
         workspaceId: string;
-        itemId: string;
-        grantId: string;
+        uploadId: string;
       };
       cookie?: never;
     };
-    requestBody: {
-      content: {
-        "application/json": {
-          actions?: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-          expiresAtEpochMilliseconds?: number | null;
-        };
-      };
-    };
+    requestBody?: never;
     responses: {
-      /** @description The direct grant was committed or replayed. */
+      /** @description The verified current version is ready. */
       200: {
         headers: {
-          /** @description Current direct collection precondition for POST. */
-          "Drive-Permission-Collection-ETag"?: string;
-          /** @description Current direct-grant precondition for the next PATCH or DELETE; omitted when the current row is not mutable. */
-          "Drive-Permission-Grant-ETag"?: string;
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            collectionRevision: number;
-            grant: {
-              actions: ("items:content:read" | "items:create" | "items:delete" | "items:metadata:read" | "items:permissions:read" | "items:update")[];
-              /** @enum {string} */
-              availability: "active" | "expired" | "revoked";
-              expiresAtEpochMilliseconds: number | null;
-              grantId: string;
-              grantee: {
-                /** @enum {string} */
-                type: "user";
-                userId: string;
-              } | {
-                teamId: string;
-                /** @enum {string} */
-                type: "team";
-              };
-              revision: number;
-              /** @enum {string} */
-              source: "direct";
-              sourceItemId: string;
-            };
+            byteLength: number;
+            /** @description Caller-declared whole-file SHA-256 metadata; archive publication is gated by provider checksum evidence. */
+            callerDeclaredContentDigest: string;
+            displayFilename: string;
+            itemId: string;
+            mediaType: string;
             /** @enum {string} */
-            outcome: "committed" | "replayed";
+            state: "ready";
+            uploadId: string;
+            versionId: string;
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
+      /** @description Authentication is required. */
       401: {
         headers: {
           [name: string]: unknown;
@@ -1368,7 +3865,7 @@ interface operations {
           };
         };
       };
-      /** @description The discoverable item does not permit this permission operation. */
+      /** @description Permission is denied. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1386,7 +3883,7 @@ interface operations {
           };
         };
       };
-      /** @description The item, principal, or direct grant is absent or undiscoverable. */
+      /** @description The upload is not discoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1404,7 +3901,7 @@ interface operations {
           };
         };
       };
-      /** @description The idempotency key was reused for a different semantic request. */
+      /** @description The upload is incomplete, conflicts, or requires recovery. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -1413,34 +3910,25 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "idempotency_conflict";
+              code: "precondition_failed";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
+              message: "The request precondition failed.";
               requestId: string;
             };
-          };
-        };
-      };
-      /** @description The supplied revision or post-preflight authority is stale. */
-      412: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
+          } | {
             error: {
               /** @enum {string} */
-              code: "precondition_failed";
+              code: "upload_recovery_required";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The request precondition failed.";
+              message: "The upload requires recovery before it can continue.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The path, query, headers, idempotency key, or body are invalid. */
+      /** @description The request is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1467,7 +3955,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity, D1, authorization, audit, cursor, or capacity authority is unavailable. */
+      /** @description Identity or the service is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1496,71 +3984,46 @@ interface operations {
       };
     };
   };
-  createUpload: {
+  createUploadPartDescriptor: {
     parameters: {
       query?: never;
-      header: {
-        "Idempotency-Key": string;
-      };
+      header?: never;
       path: {
         workspaceId: string;
+        uploadId: string;
       };
       cookie?: never;
     };
     requestBody: {
       content: {
         "application/json": {
-          expectedByteLength: number;
-          parentItemId: string;
+          checksumSha256: string;
+          partNumber: number;
         };
       };
     };
     responses: {
-      /** @description The exact retained reservation is replayed. */
+      /** @description One short-lived exact part capability. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            createdAtEpochMilliseconds: number;
-            expectedByteLength: number;
-            expiresAtEpochMilliseconds: number;
-            parentItemId: string;
-            /** @enum {string} */
-            state: "reserved";
-            /** @enum {unknown|null} */
-            terminalAtEpochMilliseconds: null;
-            /** @enum {unknown|null} */
-            terminalReason: null;
-            uploadId: string;
-            workspaceId: string;
-          };
-        };
-      };
-      /** @description Quota and mandatory D1 capacity are reserved. */
-      201: {
-        headers: {
-          [name: string]: unknown;
-        };
-        content: {
-          "application/json": {
-            createdAtEpochMilliseconds: number;
             expectedByteLength: number;
             expiresAtEpochMilliseconds: number;
-            parentItemId: string;
+            headers: {
+              "x-amz-checksum-sha256": string;
+            };
             /** @enum {string} */
-            state: "reserved";
-            /** @enum {unknown|null} */
-            terminalAtEpochMilliseconds: null;
-            /** @enum {unknown|null} */
-            terminalReason: null;
-            uploadId: string;
-            workspaceId: string;
+            method: "PUT";
+            partNumber: number;
+            /** Format: uri */
+            url: string;
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
+      /** @description Authentication is required. */
       401: {
         headers: {
           [name: string]: unknown;
@@ -1578,7 +4041,7 @@ interface operations {
           };
         };
       };
-      /** @description Managed storage is disabled or the discoverable parent does not permit item creation. */
+      /** @description Permission is denied. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1596,7 +4059,7 @@ interface operations {
           };
         };
       };
-      /** @description The parent is absent or undiscoverable. */
+      /** @description The upload is not discoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1614,7 +4077,7 @@ interface operations {
           };
         };
       };
-      /** @description Quota is exceeded, the key conflicts, or authority changed before commit. */
+      /** @description The upload or part conflicts or requires recovery. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -1623,34 +4086,25 @@ interface operations {
           "application/json": {
             error: {
               /** @enum {string} */
-              code: "quota_exceeded";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The workspace storage quota would be exceeded.";
-              requestId: string;
-            };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "idempotency_conflict";
+              code: "precondition_failed";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The idempotency key conflicts with an earlier request.";
+              message: "The request precondition failed.";
               requestId: string;
             };
           } | {
             error: {
               /** @enum {string} */
-              code: "precondition_failed";
+              code: "upload_recovery_required";
               details: Record<string, never>;
               /** @enum {string} */
-              message: "The request precondition failed.";
+              message: "The upload requires recovery before it can continue.";
               requestId: string;
             };
           };
         };
       };
-      /** @description The path, key, media type, or strict request body is invalid. */
+      /** @description The request is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1665,19 +4119,10 @@ interface operations {
               message: "The request is invalid.";
               requestId: string;
             };
-          } | {
-            error: {
-              /** @enum {string} */
-              code: "invalid_idempotency_key";
-              details: Record<string, never>;
-              /** @enum {string} */
-              message: "The idempotency key is invalid.";
-              requestId: string;
-            };
           };
         };
       };
-      /** @description Identity, D1, authorization, entitlement, or trusted capacity authority is unavailable. */
+      /** @description Identity or the service is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1706,40 +4151,41 @@ interface operations {
       };
     };
   };
-  abortUpload: {
+  recordUploadPart: {
     parameters: {
       query?: never;
       header?: never;
       path: {
         workspaceId: string;
         uploadId: string;
+        partNumber: string;
       };
       cookie?: never;
     };
-    requestBody?: never;
+    requestBody: {
+      content: {
+        "application/json": {
+          byteLength: number;
+          checksumSha256: string;
+          etag: string;
+          expectedUploadRevision: number;
+        };
+      };
+    };
     responses: {
-      /** @description The reservation is released or its exact abort is replayed. */
+      /** @description The callback is retained or exactly replayed. */
       200: {
         headers: {
           [name: string]: unknown;
         };
         content: {
           "application/json": {
-            createdAtEpochMilliseconds: number;
-            expectedByteLength: number;
-            expiresAtEpochMilliseconds: number;
-            parentItemId: string;
-            /** @enum {string} */
-            state: "released";
-            terminalAtEpochMilliseconds: number;
-            /** @enum {string} */
-            terminalReason: "aborted";
-            uploadId: string;
-            workspaceId: string;
+            partNumber: number;
+            revision: number;
           };
         };
       };
-      /** @description A valid Drive user bearer credential is required. */
+      /** @description Authentication is required. */
       401: {
         headers: {
           [name: string]: unknown;
@@ -1757,7 +4203,7 @@ interface operations {
           };
         };
       };
-      /** @description The retained parent is discoverable but no longer permits item creation. */
+      /** @description Permission is denied. */
       403: {
         headers: {
           [name: string]: unknown;
@@ -1775,7 +4221,7 @@ interface operations {
           };
         };
       };
-      /** @description The upload is unknown, cross-workspace, or its retained parent is undiscoverable. */
+      /** @description The upload is not discoverable. */
       404: {
         headers: {
           [name: string]: unknown;
@@ -1793,7 +4239,7 @@ interface operations {
           };
         };
       };
-      /** @description Another terminal settlement won or parent authority changed before commit. */
+      /** @description The callback conflicts or requires recovery. */
       409: {
         headers: {
           [name: string]: unknown;
@@ -1808,10 +4254,19 @@ interface operations {
               message: "The request precondition failed.";
               requestId: string;
             };
+          } | {
+            error: {
+              /** @enum {string} */
+              code: "upload_recovery_required";
+              details: Record<string, never>;
+              /** @enum {string} */
+              message: "The upload requires recovery before it can continue.";
+              requestId: string;
+            };
           };
         };
       };
-      /** @description The path, query, or unexpected request body is invalid. */
+      /** @description The request is invalid. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -1829,7 +4284,7 @@ interface operations {
           };
         };
       };
-      /** @description Identity, D1, authorization, or retained capacity authority is unavailable. */
+      /** @description Identity or the service is unavailable. */
       503: {
         headers: {
           [name: string]: unknown;
@@ -1875,6 +4330,8 @@ type JsonRequest<Name extends keyof operations> = operations[Name] extends {
 } ? Body : never;
 type ResourcePath = operations["listFolderChildren"]["parameters"]["path"];
 type PageQuery = NonNullable<operations["listFolderChildren"]["parameters"]["query"]>;
+type SearchWorkspaceItemsPath = operations["searchWorkspaceItems"]["parameters"]["path"];
+type SearchWorkspaceItemsQuery = NonNullable<operations["searchWorkspaceItems"]["parameters"]["query"]>;
 type CreateFolderBody = JsonRequest<"createFolder">;
 type CreatePermissionBody = JsonRequest<"createItemPermission">;
 type UpdatePermissionBody = JsonRequest<"updateItemPermission">;
@@ -1885,15 +4342,67 @@ type GrantMutationHeaders = operations["updateItemPermission"]["parameters"]["he
 type CreateUploadPath = operations["createUpload"]["parameters"]["path"];
 type CreateUploadHeaders = operations["createUpload"]["parameters"]["header"];
 type CreateUploadBody = JsonRequest<"createUpload">;
+type UploadPath = operations["abortUpload"]["parameters"]["path"];
+type UploadStatusPath = operations["getUploadStatus"]["parameters"]["path"];
+type CreateUploadPartDescriptorBody = JsonRequest<"createUploadPartDescriptor">;
+type RecordUploadPartPath = operations["recordUploadPart"]["parameters"]["path"];
+type RecordUploadPartBody = JsonRequest<"recordUploadPart">;
+type CompleteUploadHeaders = operations["completeUpload"]["parameters"]["header"];
 type AbortUploadPath = operations["abortUpload"]["parameters"]["path"];
+type UpdateItemPath = operations["updateItem"]["parameters"]["path"];
+type UpdateItemHeaders = operations["updateItem"]["parameters"]["header"];
+type UpdateItemBody = JsonRequest<"updateItem">;
+type ListItemVersionsPath = operations["listItemVersions"]["parameters"]["path"];
+type ListItemVersionsQuery = NonNullable<operations["listItemVersions"]["parameters"]["query"]>;
+type GetItemVersionPath = operations["getItemVersion"]["parameters"]["path"];
+type RestoreItemVersionPath = operations["restoreItemVersion"]["parameters"]["path"];
+type RestoreItemVersionHeaders = operations["restoreItemVersion"]["parameters"]["header"];
+type CreateDownloadPath = operations["createDownload"]["parameters"]["path"];
+type CreateDownloadQuery = NonNullable<operations["createDownload"]["parameters"]["query"]>;
+type CreateDownloadHeaders = operations["createDownload"]["parameters"]["header"];
 type GeneratedCurrentWorkspace = JsonResponse<"getCurrentWorkspace", 200>;
 type CurrentWorkspace = Readonly<Omit<GeneratedCurrentWorkspace, "workspaceReference"> & {
   readonly workspaceReference: Readonly<GeneratedCurrentWorkspace["workspaceReference"]>;
 }>;
 type FolderItem = Readonly<JsonResponse<"createFolder", 201>>;
-type ReservedUploadQuota = Readonly<JsonResponse<"createUpload", 201>>;
-type AbortedUploadQuota = Readonly<JsonResponse<"abortUpload", 200>>;
-type UploadQuotaReservation = ReservedUploadQuota | AbortedUploadQuota;
+type UploadSession = Readonly<JsonResponse<"createUpload", 201>>;
+type UploadPartDescriptor = Readonly<Omit<JsonResponse<"createUploadPartDescriptor", 200>, "headers"> & {
+  readonly headers: Readonly<JsonResponse<"createUploadPartDescriptor", 200>["headers"]>;
+}>;
+type UploadPartResult = Readonly<JsonResponse<"recordUploadPart", 200>>;
+type ReadyUpload = Readonly<JsonResponse<"completeUpload", 200>>;
+type ManagedLifecycleItem = Readonly<JsonResponse<"updateItem", 200>>;
+type GeneratedManagedItemMetadata = JsonResponse<"getItem", 200>;
+type ManagedItemMetadata = Readonly<Omit<GeneratedManagedItemMetadata, "currentVersion"> & {
+  readonly currentVersion: Readonly<NonNullable<GeneratedManagedItemMetadata["currentVersion"]>> | null;
+}>;
+type GeneratedWorkspaceItemSearchPage = JsonResponse<"searchWorkspaceItems", 200>;
+type WorkspaceItemSearchItem = Readonly<Omit<GeneratedWorkspaceItemSearchPage["items"][number], "currentVersion"> & {
+  readonly currentVersion: Readonly<NonNullable<GeneratedWorkspaceItemSearchPage["items"][number]["currentVersion"]>> | null;
+}>;
+type WorkspaceItemSearchPage = Readonly<Omit<GeneratedWorkspaceItemSearchPage, "items"> & {
+  readonly items: readonly WorkspaceItemSearchItem[];
+}>;
+type GeneratedManagedItemVersionPage = JsonResponse<"listItemVersions", 200>;
+type ManagedItemVersion = Readonly<GeneratedManagedItemVersionPage["items"][number]>;
+type ManagedItemVersionResource = Readonly<JsonResponse<"getItemVersion", 200>>;
+type ManagedItemVersionPage = Readonly<Omit<GeneratedManagedItemVersionPage, "items"> & {
+  readonly items: readonly ManagedItemVersion[];
+}>;
+type ManagedItemVersionRestoreResult = Readonly<JsonResponse<"restoreItemVersion", 200>>;
+type ManagedDownloadDescriptor = Readonly<Omit<JsonResponse<"createDownload", 200>, "headers" | "response"> & {
+  readonly headers: Readonly<JsonResponse<"createDownload", 200>["headers"]>;
+  readonly response: Readonly<JsonResponse<"createDownload", 200>["response"]>;
+}>;
+type ManagedDownloadRestorePending = Readonly<JsonResponse<"createDownload", 202>>;
+type GeneratedUploadStatus = JsonResponse<"getUploadStatus", 200>;
+type UploadConfirmedPart = Readonly<GeneratedUploadStatus["confirmedParts"][number]>;
+type UploadStatus = Readonly<Omit<GeneratedUploadStatus, "confirmedParts" | "partPolicy" | "ready"> & {
+  readonly confirmedParts: readonly UploadConfirmedPart[];
+  readonly partPolicy: Readonly<GeneratedUploadStatus["partPolicy"]>;
+  readonly ready: ReadyUpload | null;
+}>;
+type ProtectionClassification = CreateUploadBody["protectionClassification"];
 type PermissionAction = CreatePermissionBody["actions"][number];
 type PermissionGrantee = Readonly<CreatePermissionBody["grantee"]>;
 type GeneratedPermissionGrant = JsonResponse<"listItemPermissions", 200>["items"][number];
@@ -1951,6 +4460,10 @@ type ResourceInput = Readonly<ResourcePath> & {
 };
 type PageInput = ResourceInput & Readonly<PageQuery>;
 type ListFolderChildrenInput = PageInput;
+type GetItemInput = ResourceInput;
+type SearchWorkspaceItemsInput = Readonly<SearchWorkspaceItemsPath> & Readonly<SearchWorkspaceItemsQuery> & {
+  readonly signal?: AbortSignal;
+};
 type CreateFolderInput = ResourceInput & Readonly<CreateFolderBody> & {
   readonly idempotencyKey: CreateFolderHeaders["Idempotency-Key"];
 };
@@ -1974,23 +4487,113 @@ type CreateUploadInput = Readonly<CreateUploadPath> & Readonly<CreateUploadBody>
   readonly idempotencyKey: CreateUploadHeaders["Idempotency-Key"];
   readonly signal?: AbortSignal;
 };
+type CreateUploadPartDescriptorInput = Readonly<UploadPath> & Readonly<CreateUploadPartDescriptorBody> & {
+  readonly signal?: AbortSignal;
+};
+type GetUploadStatusInput = Readonly<UploadStatusPath> & {
+  readonly afterPartNumber?: number;
+  readonly limit?: number;
+  readonly signal?: AbortSignal;
+};
+type RecordUploadPartInput = Readonly<Omit<RecordUploadPartPath, "partNumber">> & Readonly<RecordUploadPartBody> & {
+  readonly partNumber: number;
+  readonly signal?: AbortSignal;
+};
+type CompleteUploadInput = Readonly<UploadPath> & {
+  readonly idempotencyKey: CompleteUploadHeaders["Idempotency-Key"];
+  readonly signal?: AbortSignal;
+};
 type AbortUploadInput = Readonly<AbortUploadPath> & {
   readonly signal?: AbortSignal;
 };
+type UpdateItemInput = Readonly<UpdateItemPath> & Readonly<UpdateItemBody> & {
+  readonly idempotencyKey: UpdateItemHeaders["Idempotency-Key"];
+  readonly ifMatch: UpdateItemHeaders["If-Match"];
+  readonly signal?: AbortSignal;
+};
+type LifecycleMutationInput<Name extends "trashItem" | "restoreItem" | "deleteItem"> = Readonly<operations[Name]["parameters"]["path"]> & {
+  readonly idempotencyKey: operations[Name]["parameters"]["header"]["Idempotency-Key"];
+  readonly ifMatch: operations[Name]["parameters"]["header"]["If-Match"];
+  readonly signal?: AbortSignal;
+};
+type TrashItemInput = LifecycleMutationInput<"trashItem">;
+type RestoreItemInput = LifecycleMutationInput<"restoreItem">;
+type DeleteItemInput = LifecycleMutationInput<"deleteItem">;
+type ListItemVersionsInput = Readonly<ListItemVersionsPath> & Readonly<ListItemVersionsQuery> & {
+  readonly signal?: AbortSignal;
+};
+type GetItemVersionInput = Readonly<GetItemVersionPath> & {
+  readonly signal?: AbortSignal;
+};
+type RestoreItemVersionInput = Readonly<RestoreItemVersionPath> & {
+  readonly idempotencyKey: RestoreItemVersionHeaders["Idempotency-Key"];
+  readonly ifMatch: RestoreItemVersionHeaders["If-Match"];
+  readonly signal?: AbortSignal;
+};
+type CreateDownloadInput = Readonly<CreateDownloadPath> & Readonly<CreateDownloadQuery> & {
+  readonly idempotencyKey: CreateDownloadHeaders["Idempotency-Key"];
+  readonly method?: "GET" | "HEAD";
+  readonly range?: string;
+  readonly ifMatch?: string;
+  readonly ifNoneMatch?: string;
+  readonly ifRange?: string;
+  readonly signal?: AbortSignal;
+};
+type DownloadItemResult = Response | DriveOperationResult<ManagedDownloadRestorePending, 202> | DriveOperationResult<undefined, 304>;
+type UploadFilePhase = "preparing" | "uploading" | "completing";
+interface UploadFileProgress {
+  readonly phase: UploadFilePhase;
+  readonly confirmedByteLength: number;
+  readonly totalByteLength: number;
+  readonly confirmedPartCount: number;
+  readonly totalPartCount: number;
+}
+type UploadFileProgressCallback = (progress: UploadFileProgress) => void;
+interface UploadFileInput {
+  readonly workspaceId: string;
+  readonly parentItemId: string;
+  readonly source: Blob;
+  readonly displayFilename: string;
+  readonly mediaType?: string;
+  readonly protectionClassification?: ProtectionClassification;
+  readonly idempotencyKey: string;
+  readonly completionIdempotencyKey: string;
+  readonly signal?: AbortSignal;
+  readonly onProgress?: UploadFileProgressCallback;
+}
 interface GetCurrentWorkspaceInput {
   readonly signal?: AbortSignal;
 }
-interface DriveClient {
+interface DriveOperations {
   getCurrentWorkspace(input?: GetCurrentWorkspaceInput): Promise<DriveOperationResult<CurrentWorkspace, 200>>;
+  getItem(input: GetItemInput): Promise<DriveOperationResult<ManagedItemMetadata, 200>>;
+  searchWorkspaceItems(input: SearchWorkspaceItemsInput): Promise<DriveOperationResult<WorkspaceItemSearchPage, 200>>;
   listFolderChildren(input: ListFolderChildrenInput): Promise<DriveOperationResult<FolderPage, 200>>;
   createFolder(input: CreateFolderInput): Promise<DriveOperationResult<FolderItem, 200 | 201>>;
+  updateItem(input: UpdateItemInput): Promise<DriveOperationResult<ManagedLifecycleItem, 200>>;
+  trashItem(input: TrashItemInput): Promise<DriveOperationResult<ManagedLifecycleItem, 200>>;
+  restoreItem(input: RestoreItemInput): Promise<DriveOperationResult<ManagedLifecycleItem, 200>>;
+  deleteItem(input: DeleteItemInput): Promise<DriveOperationResult<ManagedLifecycleItem, 200 | 202>>;
+  listItemVersions(input: ListItemVersionsInput): Promise<DriveOperationResult<ManagedItemVersionPage, 200>>;
+  getItemVersion(input: GetItemVersionInput): Promise<DriveOperationResult<ManagedItemVersionResource, 200>>;
+  restoreItemVersion(input: RestoreItemVersionInput): Promise<DriveOperationResult<ManagedItemVersionRestoreResult, 200>>;
+  createDownload(input: CreateDownloadInput): Promise<DriveOperationResult<ManagedDownloadDescriptor, 200> | DriveOperationResult<ManagedDownloadRestorePending, 202> | DriveOperationResult<undefined, 304>>;
+  downloadItem(input: CreateDownloadInput): Promise<DownloadItemResult>;
   listItemPermissions(input: ListItemPermissionsInput): Promise<DriveOperationResult<PermissionPage, 200>>;
   readEffectiveItemPermissions(input: ReadEffectiveItemPermissionsInput): Promise<DriveOperationResult<EffectivePermissionResponse, 200>>;
   createItemPermission(input: CreateItemPermissionInput): Promise<DriveOperationResult<PermissionMutation, 200 | 201>>;
   updateItemPermission(input: UpdateItemPermissionInput): Promise<DriveOperationResult<PermissionMutation, 200>>;
   revokeItemPermission(input: RevokeItemPermissionInput): Promise<DriveOperationResult<PermissionMutation, 200>>;
-  createUpload(input: CreateUploadInput): Promise<DriveOperationResult<ReservedUploadQuota, 200 | 201>>;
-  abortUpload(input: AbortUploadInput): Promise<DriveOperationResult<AbortedUploadQuota, 200>>;
+  createUpload(input: CreateUploadInput): Promise<DriveOperationResult<UploadSession, 200 | 201>>;
+  getUploadStatus(input: GetUploadStatusInput): Promise<DriveOperationResult<UploadStatus, 200>>;
+  createUploadPartDescriptor(input: CreateUploadPartDescriptorInput): Promise<DriveOperationResult<UploadPartDescriptor, 200>>;
+  recordUploadPart(input: RecordUploadPartInput): Promise<DriveOperationResult<UploadPartResult, 200>>;
+  completeUpload(input: CompleteUploadInput): Promise<DriveOperationResult<ReadyUpload, 200>>;
+  abortUpload(input: AbortUploadInput): Promise<DriveOperationResult<undefined, 204>>;
+}
+interface DriveServerClient extends DriveOperations {}
+interface DriveClient extends DriveOperations {
+  uploadFile(input: UploadFileInput): Promise<DriveOperationResult<ReadyUpload, 200>>;
 }
 //#endregion
-export { UploadQuotaReservation as A, PermissionGrantee as C, ReservedUploadQuota as D, ReadEffectiveItemPermissionsInput as E, RevokeItemPermissionInput as O, PermissionGrant as S, PermissionPage as T, FolderPage as _, CreateUploadInput as a, ListItemPermissionsInput as b, DriveClientConfig as c, DriveOperationResult as d, DriveResponseValidators as f, FolderItem as g, EffectivePermissionResponse as h, CreateItemPermissionInput as i, UpdateItemPermissionInput as k, DriveCredentialContext as l, EffectivePermissionAction as m, AbortedUploadQuota as n, CurrentWorkspace as o, DriveServerClientConfig as p, CreateFolderInput as r, DriveClient as s, AbortUploadInput as t, DriveCredentialProvider as u, GetCurrentWorkspaceInput as v, PermissionMutation as w, PermissionAction as x, ListFolderChildrenInput as y };
+export { UpdateItemInput as $, ListItemVersionsInput as A, PermissionGrant as B, FolderPage as C, GetUploadStatusInput as D, GetItemVersionInput as E, ManagedItemVersionPage as F, ReadEffectiveItemPermissionsInput as G, PermissionMutation as H, ManagedItemVersionResource as I, RestoreItemInput as J, ReadyUpload as K, ManagedItemVersionRestoreResult as L, ManagedDownloadRestorePending as M, ManagedItemMetadata as N, ListFolderChildrenInput as O, ManagedItemVersion as P, TrashItemInput as Q, ManagedLifecycleItem as R, FolderItem as S, GetItemInput as T, PermissionPage as U, PermissionGrantee as V, ProtectionClassification as W, RevokeItemPermissionInput as X, RestoreItemVersionInput as Y, SearchWorkspaceItemsInput as Z, DriveResponseValidators as _, CreateItemPermissionInput as a, UploadFileProgressCallback as at, EffectivePermissionAction as b, CurrentWorkspace as c, UploadSession as ct, DriveClient as d, WorkspaceItemSearchPage as dt, UpdateItemPermissionInput as et, DriveClientConfig as f, DriveOperations as g, DriveOperationResult as h, CreateFolderInput as i, UploadFileProgress as it, ManagedDownloadDescriptor as j, ListItemPermissionsInput as k, DeleteItemInput as l, UploadStatus as lt, DriveCredentialProvider as m, CompleteUploadInput as n, UploadFileInput as nt, CreateUploadInput as o, UploadPartDescriptor as ot, DriveCredentialContext as p, RecordUploadPartInput as q, CreateDownloadInput as r, UploadFilePhase as rt, CreateUploadPartDescriptorInput as s, UploadPartResult as st, AbortUploadInput as t, UploadConfirmedPart as tt, DownloadItemResult as u, WorkspaceItemSearchItem as ut, DriveServerClient as v, GetCurrentWorkspaceInput as w, EffectivePermissionResponse as x, DriveServerClientConfig as y, PermissionAction as z };