@finueva/drive 0.5.1 → 0.7.0

package/dist/index.js

@@ -584,12 +584,14 @@ function isUploadStatus(value, afterPartNumber, limit) {
 		"nextAfterPartNumber",
 		"expiresAtEpochMilliseconds",
 		"ready"
-	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || ![
+	], ["verification"]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || ![
 		"initiating",
 		"recovery-required",
 		"uploading",
 		"completing",
 		"provider-completed",
+		"verifying",
+		"failed",
 		"ready",
 		"aborting",
 		"aborted"
@@ -599,18 +601,38 @@ function isUploadStatus(value, afterPartNumber, limit) {
 		"maxParts"
 	]) || value.partPolicy.partByteLength !== UPLOAD_PART_BYTE_LENGTH$2 || !isSafeInteger$1(value.partPolicy.partCount) || value.partPolicy.partCount > 1e4 || value.partPolicy.maxParts !== 1e4 || (value.mode === "server-mediated-zero-byte" ? value.partPolicy.partCount !== 0 : value.partPolicy.partCount < 1) || !Array.isArray(value.confirmedParts) || value.confirmedParts.length > limit || !isSafeInteger$1(value.expiresAtEpochMilliseconds)) return false;
 	let previousPartNumber = afterPartNumber;
+	if (value.verification !== void 0) {
+		const progress = value.verification;
+		if (!isExactRecord(progress, [
+			"state",
+			"verifiedByteLength",
+			"totalByteLength",
+			"revision"
+		]) || ![
+			"pending",
+			"verified",
+			"failed"
+		].includes(String(progress.state)) || !isSafeInteger$1(progress.verifiedByteLength) || !isSafeInteger$1(progress.totalByteLength) || progress.totalByteLength > MAX_UPLOAD_BYTE_LENGTH$1 || progress.verifiedByteLength > progress.totalByteLength || !isSafeInteger$1(progress.revision) || progress.state === "verified" && progress.verifiedByteLength !== progress.totalByteLength) return false;
+		Object.freeze(progress);
+	}
+	if (["verifying", "failed"].includes(String(value.lifecycle)) && value.verification === void 0) return false;
 	for (const part of value.confirmedParts) {
 		if (!isExactRecord(part, ["partNumber", "checksumSha256"]) || !isSafeInteger$1(part.partNumber) || part.partNumber <= previousPartNumber || part.partNumber > value.partPolicy.partCount || !isPartChecksum$1(part.checksumSha256)) return false;
 		previousPartNumber = part.partNumber;
 	}
-	if (!(value.nextAfterPartNumber === null || isSafeInteger$1(value.nextAfterPartNumber) && value.confirmedParts.length === limit && value.nextAfterPartNumber === previousPartNumber) || value.mode === "server-mediated-zero-byte" && (value.confirmedParts.length !== 0 || value.nextAfterPartNumber !== null) || value.lifecycle === "ready" !== (value.ready !== null) || value.ready !== null && (!isReadyUpload(value.ready, { uploadId: value.uploadId }) || value.ready.itemId !== value.itemId || value.ready.versionId !== value.versionId)) return false;
+	if (!(value.nextAfterPartNumber === null || isSafeInteger$1(value.nextAfterPartNumber) && value.confirmedParts.length === limit && value.nextAfterPartNumber === previousPartNumber) || value.mode === "server-mediated-zero-byte" && (value.confirmedParts.length !== 0 || value.nextAfterPartNumber !== null) || value.lifecycle === "ready" !== (value.ready !== null) || value.ready !== null && (!isReadyUpload(value.ready, { uploadId: value.uploadId }) || value.ready.itemId !== value.itemId || value.ready.versionId !== value.versionId || !isExactRecord(value.verification, [
+		"state",
+		"verifiedByteLength",
+		"totalByteLength",
+		"revision"
+	]) || value.verification.state !== "verified" || value.verification.totalByteLength !== value.ready.byteLength)) return false;
 	Object.freeze(value.partPolicy);
 	for (const part of value.confirmedParts) Object.freeze(part);
 	Object.freeze(value.confirmedParts);
 	Object.freeze(value);
 	return true;
 }
-function isUploadPartDescriptor(value, expectedPartNumber, checksumSha256, allowInsecureHttp) {
+function isUploadPartDescriptor(value, expectedPartNumber, allowInsecureHttp, contentMd5) {
 	if (!isExactRecord(value, [
 		"url",
 		"method",
@@ -618,7 +640,7 @@ function isUploadPartDescriptor(value, expectedPartNumber, checksumSha256, allow
 		"partNumber",
 		"expectedByteLength",
 		"expiresAtEpochMilliseconds"
-	]) || !isSignedTransferUrl(value.url, allowInsecureHttp) || value.method !== "PUT" || !isExactRecord(value.headers, ["x-amz-checksum-sha256"]) || value.headers["x-amz-checksum-sha256"] !== checksumSha256 || value.partNumber !== expectedPartNumber || !isSafeInteger$1(value.expectedByteLength) || value.expectedByteLength < 1 || value.expectedByteLength > UPLOAD_PART_BYTE_LENGTH$2 || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
+	]) || !isSignedTransferUrl(value.url, allowInsecureHttp) || value.method !== "PUT" || !contentMd5 || !isExactRecord(value.headers, ["content-md5"]) || value.headers["content-md5"] !== contentMd5 || value.partNumber !== expectedPartNumber || !isSafeInteger$1(value.expectedByteLength) || value.expectedByteLength < 1 || value.expectedByteLength > UPLOAD_PART_BYTE_LENGTH$2 || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
 	Object.freeze(value.headers);
 	Object.freeze(value);
 	return true;
@@ -642,6 +664,19 @@ function isReadyUpload(value, expected) {
 	Object.freeze(value);
 	return true;
 }
+function isPendingUpload(value, uploadId) {
+	if (!isExactRecord(value, [
+		"itemId",
+		"versionId",
+		"uploadId",
+		"state",
+		"verifiedByteLength",
+		"totalByteLength",
+		"verificationRevision"
+	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || value.uploadId !== uploadId || value.state !== "verifying" || !isSafeInteger$1(value.verifiedByteLength) || !isSafeInteger$1(value.totalByteLength) || value.totalByteLength > MAX_UPLOAD_BYTE_LENGTH$1 || value.verifiedByteLength > value.totalByteLength || !isSafeInteger$1(value.verificationRevision)) return false;
+	Object.freeze(value);
+	return true;
+}
 function isPartChecksum$1(value) {
 	return typeof value === "string" && /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/.test(value);
 }
@@ -781,9 +816,9 @@ function isSafeCapabilityUrl(value) {
 		return false;
 	}
 }
-function isExactRecord(value, keys) {
+function isExactRecord(value, keys, optional = []) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-	return Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+	return Object.keys(value).every((key) => keys.includes(key) || optional.includes(key)) && keys.every((key) => Object.hasOwn(value, key));
 }
 //#endregion
 //#region src/internal/client/request.ts
@@ -1112,14 +1147,17 @@ function validateCreateUploadPartDescriptorInput(value) {
 		"workspaceId",
 		"uploadId",
 		"partNumber",
-		"checksumSha256"
+		"checksumSha256",
+		"contentMd5"
 	], ["signal"]);
 	const upload = validateUploadPath(input.workspaceId, input.uploadId, input.signal);
 	if (!isPartNumber(input.partNumber) || !isPartChecksum(input.checksumSha256)) throw new DriveError("invalid_input");
+	if (typeof input.contentMd5 !== "string" || !/^[A-Za-z0-9+/]{21}[AQgw]==$/.test(input.contentMd5)) throw new DriveError("invalid_input");
 	return {
 		...upload,
 		partNumber: input.partNumber,
-		checksumSha256: input.checksumSha256
+		checksumSha256: input.checksumSha256,
+		contentMd5: input.contentMd5
 	};
 }
 function validateRecordUploadPartInput(value) {
@@ -2437,7 +2475,7 @@ async function getUploadStatus(runtime, input) {
 			}
 		} }),
 		...requestOptions
-	}), [200], (value) => isUploadStatus(value, afterPartNumber, limit), false, STATUS_ERROR_CODES);
+	}), [200], (value) => isUploadStatus(value, afterPartNumber, limit) && value.uploadId === validated.uploadId, false, STATUS_ERROR_CODES);
 }
 async function createUploadPartDescriptor(runtime, input) {
 	const validated = validateCreateUploadPartDescriptorInput(input);
@@ -2449,11 +2487,12 @@ async function createUploadPartDescriptor(runtime, input) {
 			} },
 			body: {
 				partNumber: validated.partNumber,
-				checksumSha256: validated.checksumSha256
+				checksumSha256: validated.checksumSha256,
+				contentMd5: validated.contentMd5
 			}
 		}),
 		...requestOptions
-	}), [200], (value) => isUploadPartDescriptor(value, validated.partNumber, validated.checksumSha256, new URL(runtime.baseUrl).protocol === "http:"), false, TRANSFER_ERROR_CODES);
+	}), [200], (value) => isUploadPartDescriptor(value, validated.partNumber, new URL(runtime.baseUrl).protocol === "http:", validated.contentMd5), false, TRANSFER_ERROR_CODES);
 }
 async function recordUploadPart(runtime, input) {
 	const validated = validateRecordUploadPartInput(input);
@@ -2485,7 +2524,7 @@ async function completeUpload(runtime, input) {
 			header: { "Idempotency-Key": validated.idempotencyKey }
 		} }),
 		...requestOptions
-	}), [200], (value) => isReadyUpload(value, { uploadId: validated.uploadId }), false, COMPLETE_UPLOAD_ERROR_CODES);
+	}), [200, 202], (value, status) => status === 202 ? isPendingUpload(value, validated.uploadId) : isReadyUpload(value, { uploadId: validated.uploadId }), false, COMPLETE_UPLOAD_ERROR_CODES);
 }
 async function abortUpload(runtime, input) {
 	const validated = validateAbortUploadInput(input);
@@ -2549,6 +2588,9 @@ function createView(arr) {
 function rotr(word, shift) {
 	return word << 32 - shift | word >>> shift;
 }
+function rotl(word, shift) {
+	return word << shift | word >>> 32 - shift >>> 0;
+}
 const hasHexBuiltin = (() => typeof Uint8Array.from([]).toHex === "function" && typeof Uint8Array.fromHex === "function")();
 const hexes = Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, "0"));
 function bytesToHex(bytes) {
@@ -2860,6 +2902,115 @@ var _SHA256 = class extends SHA2_32B {
 };
 const sha256 = createHasher(() => new _SHA256(), oidNist(1));
 //#endregion
+//#region ../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/legacy.js
+const SHA1_IV = Uint32Array.from([
+	1732584193,
+	4023233417,
+	2562383102,
+	271733878,
+	3285377520
+]);
+const p32 = Math.pow(2, 32);
+const K = Array.from({ length: 64 }, (_, i) => Math.floor(p32 * Math.abs(Math.sin(i + 1))));
+const MD5_IV = SHA1_IV.slice(0, 4);
+const MD5_W = new Uint32Array(16);
+const MD5_SHIFTS = (() => {
+	const S = [
+		[
+			7,
+			12,
+			17,
+			22
+		],
+		[
+			5,
+			9,
+			14,
+			20
+		],
+		[
+			4,
+			11,
+			16,
+			23
+		],
+		[
+			6,
+			10,
+			15,
+			21
+		]
+	];
+	return Uint8Array.from({ length: 64 }, (_, i) => S[Math.floor(i / 16)][i % 4]);
+})();
+var _MD5 = class extends HashMD {
+	A = MD5_IV[0] | 0;
+	B = MD5_IV[1] | 0;
+	C = MD5_IV[2] | 0;
+	D = MD5_IV[3] | 0;
+	constructor() {
+		super(64, 16, 8, true);
+	}
+	get() {
+		const { A, B, C, D } = this;
+		return [
+			A,
+			B,
+			C,
+			D
+		];
+	}
+	set(A, B, C, D) {
+		this.A = A | 0;
+		this.B = B | 0;
+		this.C = C | 0;
+		this.D = D | 0;
+	}
+	_cloneInto(to) {
+		(to ||= new this.constructor()).set(...this.get());
+		return this._cloneIntoMeta(to);
+	}
+	process(view, offset) {
+		for (let i = 0; i < 16; i++, offset += 4) MD5_W[i] = view.getUint32(offset, true);
+		let { A, B, C, D } = this;
+		for (let i = 0; i < 64; i++) {
+			let F, g;
+			if (i < 16) {
+				F = Chi(B, C, D);
+				g = i;
+			} else if (i < 32) {
+				F = Chi(D, B, C);
+				g = (5 * i + 1) % 16;
+			} else if (i < 48) {
+				F = B ^ C ^ D;
+				g = (3 * i + 5) % 16;
+			} else {
+				F = C ^ (B | ~D);
+				g = 7 * i % 16;
+			}
+			F = F + A + K[i] + MD5_W[g];
+			A = D;
+			D = C;
+			C = B;
+			B = B + rotl(F, MD5_SHIFTS[i]);
+		}
+		A = A + this.A | 0;
+		B = B + this.B | 0;
+		C = C + this.C | 0;
+		D = D + this.D | 0;
+		this.set(A, B, C, D);
+	}
+	roundClean() {
+		clean(MD5_W);
+	}
+	destroy() {
+		this.destroyed = true;
+		this.set(0, 0, 0, 0);
+		clean(this.buffer);
+	}
+};
+const md5 = createHasher(() => new _MD5());
+//#endregion
 //#region src/internal/client/upload.ts
 const UPLOAD_PART_BYTE_LENGTH = 32 * 1024 * 1024;
 const STATUS_PAGE_LIMIT = 100;
@@ -2907,6 +3058,7 @@ async function uploadFileInternal(runtime, input, controls) {
 				uploadId: session.uploadId,
 				partNumber,
 				checksumSha256,
+				contentMd5: digests.partMd5s[index],
 				...validated.signal === void 0 ? {} : { signal: validated.signal }
 			});
 			const descriptor = descriptorResult.data;
@@ -2914,14 +3066,16 @@ async function uploadFileInternal(runtime, input, controls) {
 				status: descriptorResult.status,
 				requestId: descriptorResult.requestId
 			});
-			const etag = await putPart(runtime, descriptor, slicePart(validated.source, start, end, expectedByteLength), checksumSha256, validated.signal);
+			const etag = await putPart(runtime, descriptor, slicePart(validated.source, start, end, expectedByteLength), validated.signal);
 			revision = await recordPartWithReconciliation(controls, validated, session, partNumber, revision, expectedByteLength, etag, checksumSha256);
 			confirmedByteLength += expectedByteLength;
 			confirmedPartCount += 1;
 			emitProgress(validated.onProgress, "uploading", confirmedByteLength, validated.byteLength, confirmedPartCount, totalPartCount);
 		}
 		emitProgress(validated.onProgress, "completing", confirmedByteLength, validated.byteLength, confirmedPartCount, totalPartCount);
-		return await completeWithReconciliation(controls, validated, session, digests);
+		const completed = await completeWithReconciliation(controls, validated, session, digests);
+		if (completed.data.state === "verifying") emitProgress(validated.onProgress, "verifying", confirmedByteLength, validated.byteLength, confirmedPartCount, totalPartCount);
+		return completed;
 	} catch (error) {
 		if (validated.signal?.aborted && session) await bestEffortAbort(controls, validated.workspaceId, session.uploadId);
 		if (error instanceof DriveError) throw error;
@@ -2977,6 +3131,7 @@ async function readResumeState(controls, input, session, digests) {
 	if (session.mode === "presigned-multipart" && [
 		"completing",
 		"provider-completed",
+		"verifying",
 		"ready"
 	].includes(baseline.lifecycle) && confirmedParts.size !== session.partCount) throw new DriveError("invalid_response");
 	failForTerminalStatus(baseline.lifecycle, baselineRequestId);
@@ -3033,7 +3188,8 @@ async function completeWithReconciliation(controls, input, session, digests) {
 			idempotencyKey: input.completionIdempotencyKey,
 			...input.signal === void 0 ? {} : { signal: input.signal }
 		});
-		assertReadyMatchesInput(completed.data, session, input, digests, completed.requestId);
+		if (completed.data.state === "ready") assertReadyMatchesInput(completed.data, session, input, digests, completed.requestId);
+		else if (completed.data.itemId !== session.itemId || completed.data.versionId !== session.versionId || completed.data.uploadId !== session.uploadId || completed.data.totalByteLength !== input.byteLength) throw new DriveError("invalid_response");
 		return completed;
 	} catch (error) {
 		if (!isAmbiguousControlFailure(error) || input.signal?.aborted) throw error;
@@ -3054,6 +3210,7 @@ async function completeWithReconciliation(controls, input, session, digests) {
 async function hashSource(source, byteLength, partCount, signal) {
 	const fullHash = sha256.create();
 	const partChecksums = [];
+	const partMd5s = [];
 	for (let index = 0; index < partCount; index += 1) {
 		throwIfCallerAborted(signal);
 		const start = index * UPLOAD_PART_BYTE_LENGTH;
@@ -3070,13 +3227,15 @@ async function hashSource(source, byteLength, partCount, signal) {
 		const bytes = new Uint8Array(buffer);
 		fullHash.update(bytes);
 		partChecksums.push(toBase64(sha256(bytes)));
+		partMd5s.push(toBase64(md5(bytes)));
 	}
 	return Object.freeze({
 		callerDeclaredContentDigest: `sha256:${bytesToHex(fullHash.digest())}`,
-		partChecksums: Object.freeze(partChecksums)
+		partChecksums: Object.freeze(partChecksums),
+		partMd5s: Object.freeze(partMd5s)
 	});
 }
-async function putPart(runtime, descriptor, part, checksumSha256, callerSignal) {
+async function putPart(runtime, descriptor, part, callerSignal) {
 	const remainingMilliseconds = descriptor.expiresAtEpochMilliseconds - Date.now();
 	if (remainingMilliseconds < 1) throw new DriveError("invalid_response");
 	const operation = createOperationSignal(callerSignal, Math.min(runtime.timeoutMilliseconds, remainingMilliseconds));
@@ -3094,8 +3253,9 @@ async function putPart(runtime, descriptor, part, checksumSha256, callerSignal)
 		}), operation.signal);
 		if (!(response instanceof Response)) throw new DriveError("invalid_response");
 		const etag = response.headers.get("etag");
-		const responseChecksum = response.headers.get("x-amz-checksum-sha256");
-		if (response.status < 200 || response.status > 299 || !isEtag(etag) || responseChecksum !== checksumSha256) throw new DriveError("invalid_response", { status: response.status });
+		const md5Response = response.headers.get("content-md5");
+		const checksumMatches = md5Response === null || md5Response === descriptor.headers["content-md5"];
+		if (response.status < 200 || response.status > 299 || !isEtag(etag) || !checksumMatches) throw new DriveError("invalid_response", { status: response.status });
 		return etag;
 	} catch (error) {
 		if (operation.didTimeout()) throw new DriveError("timeout");
@@ -3131,7 +3291,7 @@ function failForTerminalStatus(lifecycle, requestId) {
 		status: 409,
 		...requestId === void 0 ? {} : { requestId }
 	});
-	if (lifecycle === "aborting" || lifecycle === "aborted") throw new DriveError("precondition_failed", {
+	if (lifecycle === "aborting" || lifecycle === "aborted" || lifecycle === "failed") throw new DriveError("precondition_failed", {
 		status: 409,
 		...requestId === void 0 ? {} : { requestId }
 	});

package/dist/server.d.ts

@@ -1,5 +1,23 @@
-import { $ as UpdateItemInput, A as ListItemVersionsInput, C as FolderPage, D as GetUploadStatusInput, E as GetItemVersionInput, F as ManagedItemVersionPage, I as ManagedItemVersionResource, J as RestoreItemInput, K as ReadyUpload, L as ManagedItemVersionRestoreResult, M as ManagedDownloadRestorePending, N as ManagedItemMetadata, O as ListFolderChildrenInput, P as ManagedItemVersion, Q as TrashItemInput, R as ManagedLifecycleItem, S as FolderItem, T as GetItemInput, W as ProtectionClassification, Y as RestoreItemVersionInput, Z as SearchWorkspaceItemsInput, c as CurrentWorkspace, ct as UploadSession, dt as WorkspaceItemSearchPage, j as ManagedDownloadDescriptor, l as DeleteItemInput, lt as UploadStatus, n as CompleteUploadInput, o as CreateUploadInput, ot as UploadPartDescriptor, q as RecordUploadPartInput, r as CreateDownloadInput, s as CreateUploadPartDescriptorInput, st as UploadPartResult, t as AbortUploadInput, tt as UploadConfirmedPart, u as DownloadItemResult, ut as WorkspaceItemSearchItem, v as DriveServerClient, w as GetCurrentWorkspaceInput, y as DriveServerClientConfig } from "./contract.js";
+import { $ as TrashItemInput, A as ListItemVersionsInput, C as FolderPage, D as GetUploadStatusInput, E as GetItemVersionInput, F as ManagedItemVersionPage, G as ProtectionClassification, I as ManagedItemVersionResource, J as RecordUploadPartInput, L as ManagedItemVersionRestoreResult, M as ManagedDownloadRestorePending, N as ManagedItemMetadata, O as ListFolderChildrenInput, P as ManagedItemVersion, Q as SearchWorkspaceItemsInput, R as ManagedLifecycleItem, S as FolderItem, T as GetItemInput, X as RestoreItemVersionInput, Y as RestoreItemInput, c as CurrentWorkspace, ct as UploadPartDescriptor, dt as UploadStatus, et as UpdateItemInput, ft as WorkspaceItemSearchItem, h as DriveOperationResult, j as ManagedDownloadDescriptor, l as DeleteItemInput, lt as UploadPartResult, m as DriveCredentialProvider, mt as operations, n as CompleteUploadInput, nt as UploadCompletion, o as CreateUploadInput, pt as WorkspaceItemSearchPage, q as ReadyUpload, r as CreateDownloadInput, rt as UploadConfirmedPart, s as CreateUploadPartDescriptorInput, t as AbortUploadInput, u as DownloadItemResult, ut as UploadSession, v as DriveServerClient, w as GetCurrentWorkspaceInput, y as DriveServerClientConfig, z as PendingUpload } from "./contract.js";
+//#region src/internal/provisioning.d.ts
+type Operation = operations["provisionManagedWorkspace"];
+type ProvisionWorkspaceCommand = Operation["requestBody"]["content"]["application/json"];
+type ProvisionWorkspaceResult = Operation["responses"][200]["content"]["application/json"] | Operation["responses"][201]["content"]["application/json"];
+interface DriveProvisioningClientConfig {
+  baseUrl: string;
+  environment: ProvisionWorkspaceCommand["environment"];
+  getProvisioningCredential: DriveCredentialProvider;
+  fetch?: typeof globalThis.fetch;
+  timeoutMilliseconds?: number;
+}
+interface DriveProvisioningClient {
+  provisionWorkspace(command: ProvisionWorkspaceCommand, options?: {
+    signal?: AbortSignal;
+  }): Promise<DriveOperationResult<ProvisionWorkspaceResult, 200 | 201>>;
+}
+declare function createDriveProvisioningClient(config: DriveProvisioningClientConfig): DriveProvisioningClient;
+//#endregion
 //#region src/server.d.ts
 declare function createDriveServerClient(config: DriveServerClientConfig): DriveServerClient;
 //#endregion
-export { type AbortUploadInput, type CompleteUploadInput, type CreateDownloadInput, type CreateUploadInput, type CreateUploadPartDescriptorInput, type CurrentWorkspace, type DeleteItemInput, type DownloadItemResult, type DriveServerClient, type DriveServerClientConfig, type FolderItem, type FolderPage, type GetCurrentWorkspaceInput, type GetItemInput, type GetItemVersionInput, type GetUploadStatusInput, type ListFolderChildrenInput, type ListItemVersionsInput, type ManagedDownloadDescriptor, type ManagedDownloadRestorePending, type ManagedItemMetadata, type ManagedItemVersion, type ManagedItemVersionPage, type ManagedItemVersionResource, type ManagedItemVersionRestoreResult, type ManagedLifecycleItem, type ProtectionClassification, type ReadyUpload, type RecordUploadPartInput, type RestoreItemInput, type RestoreItemVersionInput, type SearchWorkspaceItemsInput, type TrashItemInput, type UpdateItemInput, type UploadConfirmedPart, type UploadPartDescriptor, type UploadPartResult, type UploadSession, type UploadStatus, type WorkspaceItemSearchItem, type WorkspaceItemSearchPage, createDriveServerClient };
+export { type AbortUploadInput, type CompleteUploadInput, type CreateDownloadInput, type CreateUploadInput, type CreateUploadPartDescriptorInput, type CurrentWorkspace, type DeleteItemInput, type DownloadItemResult, type DriveProvisioningClient, type DriveProvisioningClientConfig, type DriveServerClient, type DriveServerClientConfig, type FolderItem, type FolderPage, type GetCurrentWorkspaceInput, type GetItemInput, type GetItemVersionInput, type GetUploadStatusInput, type ListFolderChildrenInput, type ListItemVersionsInput, type ManagedDownloadDescriptor, type ManagedDownloadRestorePending, type ManagedItemMetadata, type ManagedItemVersion, type ManagedItemVersionPage, type ManagedItemVersionResource, type ManagedItemVersionRestoreResult, type ManagedLifecycleItem, type PendingUpload, type ProtectionClassification, type ProvisionWorkspaceCommand, type ProvisionWorkspaceResult, type ReadyUpload, type RecordUploadPartInput, type RestoreItemInput, type RestoreItemVersionInput, type SearchWorkspaceItemsInput, type TrashItemInput, type UpdateItemInput, type UploadCompletion, type UploadConfirmedPart, type UploadPartDescriptor, type UploadPartResult, type UploadSession, type UploadStatus, type WorkspaceItemSearchItem, type WorkspaceItemSearchPage, createDriveProvisioningClient, createDriveServerClient };

package/dist/server.js

@@ -584,12 +584,14 @@ function isUploadStatus(value, afterPartNumber, limit) {
 		"nextAfterPartNumber",
 		"expiresAtEpochMilliseconds",
 		"ready"
-	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || ![
+	], ["verification"]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || ![
 		"initiating",
 		"recovery-required",
 		"uploading",
 		"completing",
 		"provider-completed",
+		"verifying",
+		"failed",
 		"ready",
 		"aborting",
 		"aborted"
@@ -599,18 +601,38 @@ function isUploadStatus(value, afterPartNumber, limit) {
 		"maxParts"
 	]) || value.partPolicy.partByteLength !== UPLOAD_PART_BYTE_LENGTH$1 || !isSafeInteger$1(value.partPolicy.partCount) || value.partPolicy.partCount > 1e4 || value.partPolicy.maxParts !== 1e4 || (value.mode === "server-mediated-zero-byte" ? value.partPolicy.partCount !== 0 : value.partPolicy.partCount < 1) || !Array.isArray(value.confirmedParts) || value.confirmedParts.length > limit || !isSafeInteger$1(value.expiresAtEpochMilliseconds)) return false;
 	let previousPartNumber = afterPartNumber;
+	if (value.verification !== void 0) {
+		const progress = value.verification;
+		if (!isExactRecord(progress, [
+			"state",
+			"verifiedByteLength",
+			"totalByteLength",
+			"revision"
+		]) || ![
+			"pending",
+			"verified",
+			"failed"
+		].includes(String(progress.state)) || !isSafeInteger$1(progress.verifiedByteLength) || !isSafeInteger$1(progress.totalByteLength) || progress.totalByteLength > MAX_UPLOAD_BYTE_LENGTH$1 || progress.verifiedByteLength > progress.totalByteLength || !isSafeInteger$1(progress.revision) || progress.state === "verified" && progress.verifiedByteLength !== progress.totalByteLength) return false;
+		Object.freeze(progress);
+	}
+	if (["verifying", "failed"].includes(String(value.lifecycle)) && value.verification === void 0) return false;
 	for (const part of value.confirmedParts) {
 		if (!isExactRecord(part, ["partNumber", "checksumSha256"]) || !isSafeInteger$1(part.partNumber) || part.partNumber <= previousPartNumber || part.partNumber > value.partPolicy.partCount || !isPartChecksum$1(part.checksumSha256)) return false;
 		previousPartNumber = part.partNumber;
 	}
-	if (!(value.nextAfterPartNumber === null || isSafeInteger$1(value.nextAfterPartNumber) && value.confirmedParts.length === limit && value.nextAfterPartNumber === previousPartNumber) || value.mode === "server-mediated-zero-byte" && (value.confirmedParts.length !== 0 || value.nextAfterPartNumber !== null) || value.lifecycle === "ready" !== (value.ready !== null) || value.ready !== null && (!isReadyUpload(value.ready, { uploadId: value.uploadId }) || value.ready.itemId !== value.itemId || value.ready.versionId !== value.versionId)) return false;
+	if (!(value.nextAfterPartNumber === null || isSafeInteger$1(value.nextAfterPartNumber) && value.confirmedParts.length === limit && value.nextAfterPartNumber === previousPartNumber) || value.mode === "server-mediated-zero-byte" && (value.confirmedParts.length !== 0 || value.nextAfterPartNumber !== null) || value.lifecycle === "ready" !== (value.ready !== null) || value.ready !== null && (!isReadyUpload(value.ready, { uploadId: value.uploadId }) || value.ready.itemId !== value.itemId || value.ready.versionId !== value.versionId || !isExactRecord(value.verification, [
+		"state",
+		"verifiedByteLength",
+		"totalByteLength",
+		"revision"
+	]) || value.verification.state !== "verified" || value.verification.totalByteLength !== value.ready.byteLength)) return false;
 	Object.freeze(value.partPolicy);
 	for (const part of value.confirmedParts) Object.freeze(part);
 	Object.freeze(value.confirmedParts);
 	Object.freeze(value);
 	return true;
 }
-function isUploadPartDescriptor(value, expectedPartNumber, checksumSha256, allowInsecureHttp) {
+function isUploadPartDescriptor(value, expectedPartNumber, allowInsecureHttp, contentMd5) {
 	if (!isExactRecord(value, [
 		"url",
 		"method",
@@ -618,7 +640,7 @@ function isUploadPartDescriptor(value, expectedPartNumber, checksumSha256, allow
 		"partNumber",
 		"expectedByteLength",
 		"expiresAtEpochMilliseconds"
-	]) || !isSignedTransferUrl(value.url, allowInsecureHttp) || value.method !== "PUT" || !isExactRecord(value.headers, ["x-amz-checksum-sha256"]) || value.headers["x-amz-checksum-sha256"] !== checksumSha256 || value.partNumber !== expectedPartNumber || !isSafeInteger$1(value.expectedByteLength) || value.expectedByteLength < 1 || value.expectedByteLength > UPLOAD_PART_BYTE_LENGTH$1 || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
+	]) || !isSignedTransferUrl(value.url, allowInsecureHttp) || value.method !== "PUT" || !contentMd5 || !isExactRecord(value.headers, ["content-md5"]) || value.headers["content-md5"] !== contentMd5 || value.partNumber !== expectedPartNumber || !isSafeInteger$1(value.expectedByteLength) || value.expectedByteLength < 1 || value.expectedByteLength > UPLOAD_PART_BYTE_LENGTH$1 || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
 	Object.freeze(value.headers);
 	Object.freeze(value);
 	return true;
@@ -642,6 +664,19 @@ function isReadyUpload(value, expected) {
 	Object.freeze(value);
 	return true;
 }
+function isPendingUpload(value, uploadId) {
+	if (!isExactRecord(value, [
+		"itemId",
+		"versionId",
+		"uploadId",
+		"state",
+		"verifiedByteLength",
+		"totalByteLength",
+		"verificationRevision"
+	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || value.uploadId !== uploadId || value.state !== "verifying" || !isSafeInteger$1(value.verifiedByteLength) || !isSafeInteger$1(value.totalByteLength) || value.totalByteLength > MAX_UPLOAD_BYTE_LENGTH$1 || value.verifiedByteLength > value.totalByteLength || !isSafeInteger$1(value.verificationRevision)) return false;
+	Object.freeze(value);
+	return true;
+}
 function isPartChecksum$1(value) {
 	return typeof value === "string" && /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/.test(value);
 }
@@ -781,9 +816,9 @@ function isSafeCapabilityUrl(value) {
 		return false;
 	}
 }
-function isExactRecord(value, keys) {
+function isExactRecord(value, keys, optional = []) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-	return Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+	return Object.keys(value).every((key) => keys.includes(key) || optional.includes(key)) && keys.every((key) => Object.hasOwn(value, key));
 }
 //#endregion
 //#region src/internal/client/request.ts
@@ -1112,14 +1147,17 @@ function validateCreateUploadPartDescriptorInput(value) {
 		"workspaceId",
 		"uploadId",
 		"partNumber",
-		"checksumSha256"
+		"checksumSha256",
+		"contentMd5"
 	], ["signal"]);
 	const upload = validateUploadPath(input.workspaceId, input.uploadId, input.signal);
 	if (!isPartNumber(input.partNumber) || !isPartChecksum(input.checksumSha256)) throw new DriveError("invalid_input");
+	if (typeof input.contentMd5 !== "string" || !/^[A-Za-z0-9+/]{21}[AQgw]==$/.test(input.contentMd5)) throw new DriveError("invalid_input");
 	return {
 		...upload,
 		partNumber: input.partNumber,
-		checksumSha256: input.checksumSha256
+		checksumSha256: input.checksumSha256,
+		contentMd5: input.contentMd5
 	};
 }
 function validateRecordUploadPartInput(value) {
@@ -2398,7 +2436,7 @@ async function getUploadStatus(runtime, input) {
 			}
 		} }),
 		...requestOptions
-	}), [200], (value) => isUploadStatus(value, afterPartNumber, limit), false, STATUS_ERROR_CODES);
+	}), [200], (value) => isUploadStatus(value, afterPartNumber, limit) && value.uploadId === validated.uploadId, false, STATUS_ERROR_CODES);
 }
 async function createUploadPartDescriptor(runtime, input) {
 	const validated = validateCreateUploadPartDescriptorInput(input);
@@ -2410,11 +2448,12 @@ async function createUploadPartDescriptor(runtime, input) {
 			} },
 			body: {
 				partNumber: validated.partNumber,
-				checksumSha256: validated.checksumSha256
+				checksumSha256: validated.checksumSha256,
+				contentMd5: validated.contentMd5
 			}
 		}),
 		...requestOptions
-	}), [200], (value) => isUploadPartDescriptor(value, validated.partNumber, validated.checksumSha256, new URL(runtime.baseUrl).protocol === "http:"), false, TRANSFER_ERROR_CODES);
+	}), [200], (value) => isUploadPartDescriptor(value, validated.partNumber, new URL(runtime.baseUrl).protocol === "http:", validated.contentMd5), false, TRANSFER_ERROR_CODES);
 }
 async function recordUploadPart(runtime, input) {
 	const validated = validateRecordUploadPartInput(input);
@@ -2446,7 +2485,7 @@ async function completeUpload(runtime, input) {
 			header: { "Idempotency-Key": validated.idempotencyKey }
 		} }),
 		...requestOptions
-	}), [200], (value) => isReadyUpload(value, { uploadId: validated.uploadId }), false, COMPLETE_UPLOAD_ERROR_CODES);
+	}), [200, 202], (value, status) => status === 202 ? isPendingUpload(value, validated.uploadId) : isReadyUpload(value, { uploadId: validated.uploadId }), false, COMPLETE_UPLOAD_ERROR_CODES);
 }
 async function abortUpload(runtime, input) {
 	const validated = validateAbortUploadInput(input);
@@ -2459,6 +2498,81 @@ async function abortUpload(runtime, input) {
 	}), [204], null, false, TRANSFER_ERROR_CODES);
 }
 //#endregion
+//#region src/internal/provisioning.ts
+const environments = [
+	"local",
+	"development",
+	"staging",
+	"production"
+];
+const identifier = /^[A-Za-z0-9_-]{1,128}$/;
+function createDriveProvisioningClient(config) {
+	if (!config || !environments.includes(config.environment)) throw new DriveError("invalid_input");
+	const environment = config.environment;
+	const runtime = createClientRuntime({
+		baseUrl: config.baseUrl,
+		getCredential: config.getProvisioningCredential,
+		...config.fetch === void 0 ? {} : { fetch: config.fetch },
+		...config.timeoutMilliseconds === void 0 ? {} : { timeoutMilliseconds: config.timeoutMilliseconds }
+	});
+	return Object.freeze({ async provisionWorkspace(command, options) {
+		if (!exact(command, [
+			"version",
+			"environment",
+			"provisioningId",
+			"workspaceReference",
+			"entitlement"
+		]) || command.version !== 1 || command.environment !== environment || typeof command.provisioningId !== "string" || !identifier.test(command.provisioningId) || !reference(command.workspaceReference) || !entitlement(command.entitlement)) throw new DriveError("invalid_input");
+		const body = {
+			version: command.version,
+			environment: command.environment,
+			provisioningId: command.provisioningId,
+			workspaceReference: { ...command.workspaceReference },
+			entitlement: { ...command.entitlement }
+		};
+		return execute(runtime, options?.signal, null, (api, boundary) => api.POST("/api/v1/platform/workspaces/provision", {
+			...boundary,
+			redirect: "manual",
+			body
+		}), [200, 201], (value, status) => validResult(value, status, body), false, [
+			"authentication_required",
+			"permission_denied",
+			"idempotency_conflict",
+			"invalid_request",
+			"identity_authority_unavailable",
+			"service_unavailable"
+		]);
+	} });
+}
+function exact(value, keys) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) && Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+}
+function reference(value) {
+	return exact(value, ["type", "userId"]) && value.type === "personal" && typeof value.userId === "string" && identifier.test(value.userId) || exact(value, ["type", "organizationId"]) && value.type === "organization" && typeof value.organizationId === "string" && identifier.test(value.organizationId);
+}
+function entitlement(value) {
+	return exact(value, [
+		"version",
+		"managedStorageEnabled",
+		"managedStorageByteLimit"
+	]) && typeof value.version === "number" && Number.isSafeInteger(value.version) && value.version >= 0 && typeof value.managedStorageByteLimit === "number" && Number.isSafeInteger(value.managedStorageByteLimit) && (value.managedStorageEnabled === true && value.managedStorageByteLimit > 0 || value.managedStorageEnabled === false && value.managedStorageByteLimit === 0);
+}
+function validResult(value, status, command) {
+	if (!exact(value, ["outcome", "workspace"]) || (status === 201 ? value.outcome !== "committed" : value.outcome !== "replayed" && value.outcome !== "superseded") || !exact(value.workspace, [
+		"workspaceId",
+		"rootVolumeId",
+		"rootItemId",
+		"workspaceReference",
+		"entitlement"
+	])) return false;
+	const { entitlement: current, ...workspace } = value.workspace;
+	if (!isCurrentWorkspace(workspace) || !entitlement(current)) return false;
+	const actual = workspace.workspaceReference;
+	const expected = command.workspaceReference;
+	if (!(actual.type === "personal" && expected.type === "personal" && actual.userId === expected.userId) && !(actual.type === "organization" && expected.type === "organization" && actual.organizationId === expected.organizationId)) return false;
+	return value.outcome === "superseded" ? current.version > command.entitlement.version : current.version === command.entitlement.version && current.managedStorageEnabled === command.entitlement.managedStorageEnabled && current.managedStorageByteLimit === command.entitlement.managedStorageByteLimit;
+}
+//#endregion
 //#region src/server.ts
 function createDriveServerClient(config) {
 	const credential = config.credential;
@@ -2471,4 +2585,4 @@ function createDriveServerClient(config) {
 	});
 }
 //#endregion
-export { createDriveServerClient };
+export { createDriveProvisioningClient, createDriveServerClient };