@finueva/drive 0.6.0 → 0.8.0

package/dist/index.js

@@ -327,6 +327,101 @@ const MAX_UPLOAD_BYTE_LENGTH$1 = 33554432e4;
 const UPLOAD_PART_BYTE_LENGTH$2 = 32 * 1024 * 1024;
 const CONTENT_DIGEST$1 = /^sha256:[0-9a-f]{64}$/;
 const UTF8 = new TextEncoder();
+function isWorkspaceUsage(value) {
+	if (!isExactRecord(value, [
+		"workspaceId",
+		"provider",
+		"usedBytes",
+		"reservedBytes",
+		"limitBytes",
+		"availableBytes",
+		"accounting",
+		"reservedBytesIncludeUnresolvedUploads",
+		"unresolvedReservedBytes",
+		"warnings"
+	]) || typeof value.workspaceId !== "string" || !WORKSPACE_ID$1.test(value.workspaceId) || value.provider !== "managed" || value.accounting !== "current-versions-and-reservations" || value.reservedBytesIncludeUnresolvedUploads !== true || !Array.isArray(value.warnings) || value.warnings.length > 1 || value.warnings.some((warning) => warning !== "unresolved-archive-ownership") || ![
+		value.usedBytes,
+		value.reservedBytes,
+		value.limitBytes,
+		value.availableBytes,
+		value.unresolvedReservedBytes
+	].every((bytes) => typeof bytes === "string" && /^(0|[1-9][0-9]{0,18})$/.test(bytes))) return false;
+	const available = BigInt(value.limitBytes) - BigInt(value.usedBytes) - BigInt(value.reservedBytes);
+	const valid = BigInt(value.availableBytes) === (available > 0n ? available : 0n) && BigInt(value.unresolvedReservedBytes) <= BigInt(value.reservedBytes) && (value.unresolvedReservedBytes === "0" || value.warnings.length === 1);
+	if (valid) Object.freeze(value.warnings);
+	return valid;
+}
+function isWorkspaceDiscoveryPage(value) {
+	if (!isExactRecord(value, ["items", "nextCursor"]) || !Array.isArray(value.items) || value.items.length > 50 || !(value.nextCursor === null || typeof value.nextCursor === "string" && value.nextCursor.length > 0 && value.nextCursor.length <= 2048 && /^[A-Za-z0-9_.-]+$/.test(value.nextCursor)) || value.items.length === 0 && value.nextCursor !== null) return false;
+	const ids = new Set();
+	const valid = value.items.every((item) => {
+		if (!isExactRecord(item, [
+			"workspaceId",
+			"itemId",
+			"parentId",
+			"type",
+			"name",
+			"lifecycleState",
+			"revision",
+			"currentVersion",
+			"volumeId",
+			"provider",
+			"createdAtEpochMilliseconds",
+			"modifiedAtEpochMilliseconds",
+			"creatorUserId",
+			"etag",
+			"trashedAtEpochMilliseconds",
+			"purgeAfterEpochMilliseconds"
+		]) || item.lifecycleState !== "active" && item.lifecycleState !== "trashed" || typeof item.volumeId !== "string" || !VOLUME_ID.test(item.volumeId) || item.provider !== "managed" || item.creatorUserId !== null && (typeof item.creatorUserId !== "string" || !AUTH_ID$1.test(item.creatorUserId)) || ![
+			item.createdAtEpochMilliseconds,
+			item.modifiedAtEpochMilliseconds,
+			item.trashedAtEpochMilliseconds,
+			item.purgeAfterEpochMilliseconds
+		].every((date) => date === null || isSafeInteger$1(date))) return false;
+		const metadata = {
+			workspaceId: item.workspaceId,
+			itemId: item.itemId,
+			parentId: item.parentId,
+			type: item.type,
+			name: item.name,
+			lifecycleState: "active",
+			revision: item.revision,
+			currentVersion: item.currentVersion
+		};
+		if (typeof metadata.workspaceId !== "string" || !WORKSPACE_ID$1.test(metadata.workspaceId) || typeof metadata.itemId !== "string" || !ITEM_ID$1.test(metadata.itemId) || metadata.parentId === null || metadata.parentId === metadata.itemId || !isManagedItemMetadata(metadata, metadata.workspaceId, metadata.itemId) || item.etag !== `"drive.item.v1.${metadata.revision}"` || ids.has(metadata.itemId)) return false;
+		if (item.lifecycleState === "active" ? item.trashedAtEpochMilliseconds !== null || item.purgeAfterEpochMilliseconds !== null : !isSafeInteger$1(item.trashedAtEpochMilliseconds) || !isSafeInteger$1(item.purgeAfterEpochMilliseconds) || item.purgeAfterEpochMilliseconds <= item.trashedAtEpochMilliseconds) return false;
+		ids.add(metadata.itemId);
+		return true;
+	});
+	if (valid) {
+		for (const item of value.items) Object.freeze(item);
+		Object.freeze(value.items);
+		Object.freeze(value);
+	}
+	return valid;
+}
+function isCurrentWorkspaceSources(value) {
+	if (!isExactRecord(value, [
+		"workspace",
+		"volumes",
+		"knownProviders",
+		"externalConnectionsSupported"
+	]) || !isCurrentWorkspace(value.workspace) || !Array.isArray(value.volumes) || value.volumes.length !== 1 || !Array.isArray(value.knownProviders) || value.externalConnectionsSupported !== false) return false;
+	const volume = value.volumes[0];
+	const providers = [
+		"managed",
+		"google-drive",
+		"onedrive",
+		"dropbox",
+		"s3-compatible"
+	];
+	return isExactRecord(volume, [
+		"volumeId",
+		"rootItemId",
+		"provider",
+		"name"
+	]) && volume.volumeId === value.workspace.rootVolumeId && volume.rootItemId === value.workspace.rootItemId && volume.provider === "managed" && volume.name === "Files" && value.knownProviders.length === providers.length && value.knownProviders.every((provider, index) => provider === providers[index]);
+}
 function isCurrentWorkspace(value) {
 	if (!isExactRecord(value, [
 		"workspaceId",
@@ -584,12 +679,14 @@ function isUploadStatus(value, afterPartNumber, limit) {
 		"nextAfterPartNumber",
 		"expiresAtEpochMilliseconds",
 		"ready"
-	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || ![
+	], ["verification"]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || typeof value.uploadId !== "string" || !UPLOAD_ID$1.test(value.uploadId) || value.mode !== "presigned-multipart" && value.mode !== "server-mediated-zero-byte" || ![
 		"initiating",
 		"recovery-required",
 		"uploading",
 		"completing",
 		"provider-completed",
+		"verifying",
+		"failed",
 		"ready",
 		"aborting",
 		"aborted"
@@ -599,18 +696,38 @@ function isUploadStatus(value, afterPartNumber, limit) {
 		"maxParts"
 	]) || value.partPolicy.partByteLength !== UPLOAD_PART_BYTE_LENGTH$2 || !isSafeInteger$1(value.partPolicy.partCount) || value.partPolicy.partCount > 1e4 || value.partPolicy.maxParts !== 1e4 || (value.mode === "server-mediated-zero-byte" ? value.partPolicy.partCount !== 0 : value.partPolicy.partCount < 1) || !Array.isArray(value.confirmedParts) || value.confirmedParts.length > limit || !isSafeInteger$1(value.expiresAtEpochMilliseconds)) return false;
 	let previousPartNumber = afterPartNumber;
+	if (value.verification !== void 0) {
+		const progress = value.verification;
+		if (!isExactRecord(progress, [
+			"state",
+			"verifiedByteLength",
+			"totalByteLength",
+			"revision"
+		]) || ![
+			"pending",
+			"verified",
+			"failed"
+		].includes(String(progress.state)) || !isSafeInteger$1(progress.verifiedByteLength) || !isSafeInteger$1(progress.totalByteLength) || progress.totalByteLength > MAX_UPLOAD_BYTE_LENGTH$1 || progress.verifiedByteLength > progress.totalByteLength || !isSafeInteger$1(progress.revision) || progress.state === "verified" && progress.verifiedByteLength !== progress.totalByteLength) return false;
+		Object.freeze(progress);
+	}
+	if (["verifying", "failed"].includes(String(value.lifecycle)) && value.verification === void 0) return false;
 	for (const part of value.confirmedParts) {
 		if (!isExactRecord(part, ["partNumber", "checksumSha256"]) || !isSafeInteger$1(part.partNumber) || part.partNumber <= previousPartNumber || part.partNumber > value.partPolicy.partCount || !isPartChecksum$1(part.checksumSha256)) return false;
 		previousPartNumber = part.partNumber;
 	}
-	if (!(value.nextAfterPartNumber === null || isSafeInteger$1(value.nextAfterPartNumber) && value.confirmedParts.length === limit && value.nextAfterPartNumber === previousPartNumber) || value.mode === "server-mediated-zero-byte" && (value.confirmedParts.length !== 0 || value.nextAfterPartNumber !== null) || value.lifecycle === "ready" !== (value.ready !== null) || value.ready !== null && (!isReadyUpload(value.ready, { uploadId: value.uploadId }) || value.ready.itemId !== value.itemId || value.ready.versionId !== value.versionId)) return false;
+	if (!(value.nextAfterPartNumber === null || isSafeInteger$1(value.nextAfterPartNumber) && value.confirmedParts.length === limit && value.nextAfterPartNumber === previousPartNumber) || value.mode === "server-mediated-zero-byte" && (value.confirmedParts.length !== 0 || value.nextAfterPartNumber !== null) || value.lifecycle === "ready" !== (value.ready !== null) || value.ready !== null && (!isReadyUpload(value.ready, { uploadId: value.uploadId }) || value.ready.itemId !== value.itemId || value.ready.versionId !== value.versionId || !isExactRecord(value.verification, [
+		"state",
+		"verifiedByteLength",
+		"totalByteLength",
+		"revision"
+	]) || value.verification.state !== "verified" || value.verification.totalByteLength !== value.ready.byteLength)) return false;
 	Object.freeze(value.partPolicy);
 	for (const part of value.confirmedParts) Object.freeze(part);
 	Object.freeze(value.confirmedParts);
 	Object.freeze(value);
 	return true;
 }
-function isUploadPartDescriptor(value, expectedPartNumber, checksumSha256, allowInsecureHttp) {
+function isUploadPartDescriptor(value, expectedPartNumber, allowInsecureHttp, contentMd5) {
 	if (!isExactRecord(value, [
 		"url",
 		"method",
@@ -618,7 +735,7 @@ function isUploadPartDescriptor(value, expectedPartNumber, checksumSha256, allow
 		"partNumber",
 		"expectedByteLength",
 		"expiresAtEpochMilliseconds"
-	]) || !isSignedTransferUrl(value.url, allowInsecureHttp) || value.method !== "PUT" || !isExactRecord(value.headers, ["x-amz-checksum-sha256"]) || value.headers["x-amz-checksum-sha256"] !== checksumSha256 || value.partNumber !== expectedPartNumber || !isSafeInteger$1(value.expectedByteLength) || value.expectedByteLength < 1 || value.expectedByteLength > UPLOAD_PART_BYTE_LENGTH$2 || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
+	]) || !isSignedTransferUrl(value.url, allowInsecureHttp) || value.method !== "PUT" || !contentMd5 || !isExactRecord(value.headers, ["content-md5"]) || value.headers["content-md5"] !== contentMd5 || value.partNumber !== expectedPartNumber || !isSafeInteger$1(value.expectedByteLength) || value.expectedByteLength < 1 || value.expectedByteLength > UPLOAD_PART_BYTE_LENGTH$2 || !isSafeInteger$1(value.expiresAtEpochMilliseconds) || value.expiresAtEpochMilliseconds <= Date.now()) return false;
 	Object.freeze(value.headers);
 	Object.freeze(value);
 	return true;
@@ -642,6 +759,19 @@ function isReadyUpload(value, expected) {
 	Object.freeze(value);
 	return true;
 }
+function isPendingUpload(value, uploadId) {
+	if (!isExactRecord(value, [
+		"itemId",
+		"versionId",
+		"uploadId",
+		"state",
+		"verifiedByteLength",
+		"totalByteLength",
+		"verificationRevision"
+	]) || typeof value.itemId !== "string" || !ITEM_ID$1.test(value.itemId) || typeof value.versionId !== "string" || !VERSION_ID$1.test(value.versionId) || value.uploadId !== uploadId || value.state !== "verifying" || !isSafeInteger$1(value.verifiedByteLength) || !isSafeInteger$1(value.totalByteLength) || value.totalByteLength > MAX_UPLOAD_BYTE_LENGTH$1 || value.verifiedByteLength > value.totalByteLength || !isSafeInteger$1(value.verificationRevision)) return false;
+	Object.freeze(value);
+	return true;
+}
 function isPartChecksum$1(value) {
 	return typeof value === "string" && /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/.test(value);
 }
@@ -781,9 +911,9 @@ function isSafeCapabilityUrl(value) {
 		return false;
 	}
 }
-function isExactRecord(value, keys) {
+function isExactRecord(value, keys, optional = []) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-	return Object.keys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+	return Object.keys(value).every((key) => keys.includes(key) || optional.includes(key)) && keys.every((key) => Object.hasOwn(value, key));
 }
 //#endregion
 //#region src/internal/client/request.ts
@@ -811,6 +941,29 @@ function validateCurrentWorkspaceInput(value) {
 	const signal = validateSignal(captureRecord(value === void 0 ? {} : value, [], ["signal"]).signal);
 	return signal === void 0 ? {} : { signal };
 }
+function validateWorkspaceDiscoveryInput(value, list) {
+	const input = captureRecord(value, ["workspaceId"], list ? [
+		"signal",
+		"view",
+		"kind",
+		"creatorUserId",
+		"limit",
+		"cursor"
+	] : ["signal"]);
+	const signal = validateSignal(input.signal);
+	if (typeof input.workspaceId !== "string" || !WORKSPACE_ID.test(input.workspaceId) || input.view !== void 0 && input.view !== "recent" && input.view !== "shared" && input.view !== "trash" || input.kind !== void 0 && input.kind !== "file" && input.kind !== "folder" || input.creatorUserId !== void 0 && (typeof input.creatorUserId !== "string" || !AUTH_ID.test(input.creatorUserId)) || input.limit !== void 0 && (typeof input.limit !== "number" || !Number.isInteger(input.limit) || input.limit < 1 || input.limit > 50) || input.cursor !== void 0 && (typeof input.cursor !== "string" || input.cursor.length < 1 || input.cursor.length > 2048 || !/^[A-Za-z0-9_.-]+$/.test(input.cursor))) throw new DriveError("invalid_input");
+	return {
+		workspaceId: input.workspaceId,
+		signal,
+		query: {
+			...input.view === void 0 ? {} : { view: input.view },
+			...input.kind === void 0 ? {} : { kind: input.kind },
+			...input.creatorUserId === void 0 ? {} : { creatorUserId: input.creatorUserId },
+			...input.limit === void 0 ? {} : { limit: input.limit },
+			...input.cursor === void 0 ? {} : { cursor: input.cursor }
+		}
+	};
+}
 function validateResourceInput(value) {
 	const input = captureRecord(value, ["workspaceId", "itemId"], ["signal"]);
 	const workspaceId = input.workspaceId;
@@ -1112,14 +1265,17 @@ function validateCreateUploadPartDescriptorInput(value) {
 		"workspaceId",
 		"uploadId",
 		"partNumber",
-		"checksumSha256"
+		"checksumSha256",
+		"contentMd5"
 	], ["signal"]);
 	const upload = validateUploadPath(input.workspaceId, input.uploadId, input.signal);
 	if (!isPartNumber(input.partNumber) || !isPartChecksum(input.checksumSha256)) throw new DriveError("invalid_input");
+	if (typeof input.contentMd5 !== "string" || !/^[A-Za-z0-9+/]{21}[AQgw]==$/.test(input.contentMd5)) throw new DriveError("invalid_input");
 	return {
 		...upload,
 		partNumber: input.partNumber,
-		checksumSha256: input.checksumSha256
+		checksumSha256: input.checksumSha256,
+		contentMd5: input.contentMd5
 	};
 }
 function validateRecordUploadPartInput(value) {
@@ -1984,6 +2140,9 @@ const DOWNLOAD_ERROR_CODES = Object.freeze([
 function createDriveOperations(runtime) {
 	return Object.freeze({
 		getCurrentWorkspace: (input) => getCurrentWorkspace(runtime, input),
+		listWorkspaceItems: (input) => listWorkspaceItems(runtime, input),
+		getWorkspaceUsage: (input) => getWorkspaceUsage(runtime, input),
+		getCurrentWorkspaceSources: (input) => getCurrentWorkspaceSources(runtime, input),
 		getItem: (input) => getItem(runtime, input),
 		searchWorkspaceItems: (input) => searchWorkspaceItems(runtime, input),
 		listFolderChildren: (input) => listFolderChildren(runtime, input),
@@ -2182,6 +2341,29 @@ function streamWithOperationLifetime(source, expectedLength, signal) {
 		}
 	});
 }
+async function getCurrentWorkspaceSources(runtime, input) {
+	return execute(runtime, validateCurrentWorkspaceInput(input).signal, null, (api, requestOptions) => api.GET("/api/v1/workspaces/current/sources", {
+		...operationOptions("getCurrentWorkspaceSources", { params: {} }),
+		...requestOptions
+	}), [200], isCurrentWorkspaceSources, false, CURRENT_WORKSPACE_ERROR_CODES);
+}
+async function listWorkspaceItems(runtime, input) {
+	const validated = validateWorkspaceDiscoveryInput(input, true);
+	return execute(runtime, validated.signal, null, (api, options) => api.GET("/api/v1/workspaces/{workspaceId}/items", {
+		...operationOptions("listWorkspaceItems", { params: {
+			path: { workspaceId: validated.workspaceId },
+			query: validated.query
+		} }),
+		...options
+	}), [200], (value) => isWorkspaceDiscoveryPage(value) && value.items.length <= (validated.query.limit ?? 25) && value.items.every((item, index, items) => item.workspaceId === validated.workspaceId && item.lifecycleState === (validated.query.view === "trash" ? "trashed" : "active") && ((validated.query.view ?? "recent") !== "recent" || item.modifiedAtEpochMilliseconds !== null) && (validated.query.kind === void 0 || item.type === validated.query.kind) && (validated.query.creatorUserId === void 0 || item.creatorUserId === validated.query.creatorUserId) && (index === 0 || ((validated.query.view ?? "recent") === "recent" ? items[index - 1].modifiedAtEpochMilliseconds > item.modifiedAtEpochMilliseconds || items[index - 1].modifiedAtEpochMilliseconds === item.modifiedAtEpochMilliseconds && items[index - 1].itemId < item.itemId : items[index - 1].itemId < item.itemId))), false, SEARCH_WORKSPACE_ITEMS_ERROR_CODES);
+}
+async function getWorkspaceUsage(runtime, input) {
+	const validated = validateWorkspaceDiscoveryInput(input, false);
+	return execute(runtime, validated.signal, null, (api, options) => api.GET("/api/v1/workspaces/{workspaceId}/usage", {
+		...operationOptions("getWorkspaceUsage", { params: { path: { workspaceId: validated.workspaceId } } }),
+		...options
+	}), [200], (value) => isWorkspaceUsage(value) && value.workspaceId === validated.workspaceId, false, SEARCH_WORKSPACE_ITEMS_ERROR_CODES);
+}
 async function getCurrentWorkspace(runtime, input) {
 	return execute(runtime, validateCurrentWorkspaceInput(input).signal, null, (api, requestOptions) => api.GET("/api/v1/workspaces/current", {
 		...operationOptions("getCurrentWorkspace", { params: {} }),
@@ -2437,7 +2619,7 @@ async function getUploadStatus(runtime, input) {
 			}
 		} }),
 		...requestOptions
-	}), [200], (value) => isUploadStatus(value, afterPartNumber, limit), false, STATUS_ERROR_CODES);
+	}), [200], (value) => isUploadStatus(value, afterPartNumber, limit) && value.uploadId === validated.uploadId, false, STATUS_ERROR_CODES);
 }
 async function createUploadPartDescriptor(runtime, input) {
 	const validated = validateCreateUploadPartDescriptorInput(input);
@@ -2449,11 +2631,12 @@ async function createUploadPartDescriptor(runtime, input) {
 			} },
 			body: {
 				partNumber: validated.partNumber,
-				checksumSha256: validated.checksumSha256
+				checksumSha256: validated.checksumSha256,
+				contentMd5: validated.contentMd5
 			}
 		}),
 		...requestOptions
-	}), [200], (value) => isUploadPartDescriptor(value, validated.partNumber, validated.checksumSha256, new URL(runtime.baseUrl).protocol === "http:"), false, TRANSFER_ERROR_CODES);
+	}), [200], (value) => isUploadPartDescriptor(value, validated.partNumber, new URL(runtime.baseUrl).protocol === "http:", validated.contentMd5), false, TRANSFER_ERROR_CODES);
 }
 async function recordUploadPart(runtime, input) {
 	const validated = validateRecordUploadPartInput(input);
@@ -2485,7 +2668,7 @@ async function completeUpload(runtime, input) {
 			header: { "Idempotency-Key": validated.idempotencyKey }
 		} }),
 		...requestOptions
-	}), [200], (value) => isReadyUpload(value, { uploadId: validated.uploadId }), false, COMPLETE_UPLOAD_ERROR_CODES);
+	}), [200, 202], (value, status) => status === 202 ? isPendingUpload(value, validated.uploadId) : isReadyUpload(value, { uploadId: validated.uploadId }), false, COMPLETE_UPLOAD_ERROR_CODES);
 }
 async function abortUpload(runtime, input) {
 	const validated = validateAbortUploadInput(input);
@@ -2549,6 +2732,9 @@ function createView(arr) {
 function rotr(word, shift) {
 	return word << 32 - shift | word >>> shift;
 }
+function rotl(word, shift) {
+	return word << shift | word >>> 32 - shift >>> 0;
+}
 const hasHexBuiltin = (() => typeof Uint8Array.from([]).toHex === "function" && typeof Uint8Array.fromHex === "function")();
 const hexes = Array.from({ length: 256 }, (_, i) => i.toString(16).padStart(2, "0"));
 function bytesToHex(bytes) {
@@ -2860,6 +3046,115 @@ var _SHA256 = class extends SHA2_32B {
 };
 const sha256 = createHasher(() => new _SHA256(), oidNist(1));
 //#endregion
+//#region ../../node_modules/.pnpm/@noble+hashes@2.3.0/node_modules/@noble/hashes/legacy.js
+const SHA1_IV = Uint32Array.from([
+	1732584193,
+	4023233417,
+	2562383102,
+	271733878,
+	3285377520
+]);
+const p32 = Math.pow(2, 32);
+const K = Array.from({ length: 64 }, (_, i) => Math.floor(p32 * Math.abs(Math.sin(i + 1))));
+const MD5_IV = SHA1_IV.slice(0, 4);
+const MD5_W = new Uint32Array(16);
+const MD5_SHIFTS = (() => {
+	const S = [
+		[
+			7,
+			12,
+			17,
+			22
+		],
+		[
+			5,
+			9,
+			14,
+			20
+		],
+		[
+			4,
+			11,
+			16,
+			23
+		],
+		[
+			6,
+			10,
+			15,
+			21
+		]
+	];
+	return Uint8Array.from({ length: 64 }, (_, i) => S[Math.floor(i / 16)][i % 4]);
+})();
+var _MD5 = class extends HashMD {
+	A = MD5_IV[0] | 0;
+	B = MD5_IV[1] | 0;
+	C = MD5_IV[2] | 0;
+	D = MD5_IV[3] | 0;
+	constructor() {
+		super(64, 16, 8, true);
+	}
+	get() {
+		const { A, B, C, D } = this;
+		return [
+			A,
+			B,
+			C,
+			D
+		];
+	}
+	set(A, B, C, D) {
+		this.A = A | 0;
+		this.B = B | 0;
+		this.C = C | 0;
+		this.D = D | 0;
+	}
+	_cloneInto(to) {
+		(to ||= new this.constructor()).set(...this.get());
+		return this._cloneIntoMeta(to);
+	}
+	process(view, offset) {
+		for (let i = 0; i < 16; i++, offset += 4) MD5_W[i] = view.getUint32(offset, true);
+		let { A, B, C, D } = this;
+		for (let i = 0; i < 64; i++) {
+			let F, g;
+			if (i < 16) {
+				F = Chi(B, C, D);
+				g = i;
+			} else if (i < 32) {
+				F = Chi(D, B, C);
+				g = (5 * i + 1) % 16;
+			} else if (i < 48) {
+				F = B ^ C ^ D;
+				g = (3 * i + 5) % 16;
+			} else {
+				F = C ^ (B | ~D);
+				g = 7 * i % 16;
+			}
+			F = F + A + K[i] + MD5_W[g];
+			A = D;
+			D = C;
+			C = B;
+			B = B + rotl(F, MD5_SHIFTS[i]);
+		}
+		A = A + this.A | 0;
+		B = B + this.B | 0;
+		C = C + this.C | 0;
+		D = D + this.D | 0;
+		this.set(A, B, C, D);
+	}
+	roundClean() {
+		clean(MD5_W);
+	}
+	destroy() {
+		this.destroyed = true;
+		this.set(0, 0, 0, 0);
+		clean(this.buffer);
+	}
+};
+const md5 = createHasher(() => new _MD5());
+//#endregion
 //#region src/internal/client/upload.ts
 const UPLOAD_PART_BYTE_LENGTH = 32 * 1024 * 1024;
 const STATUS_PAGE_LIMIT = 100;
@@ -2907,6 +3202,7 @@ async function uploadFileInternal(runtime, input, controls) {
 				uploadId: session.uploadId,
 				partNumber,
 				checksumSha256,
+				contentMd5: digests.partMd5s[index],
 				...validated.signal === void 0 ? {} : { signal: validated.signal }
 			});
 			const descriptor = descriptorResult.data;
@@ -2914,14 +3210,16 @@ async function uploadFileInternal(runtime, input, controls) {
 				status: descriptorResult.status,
 				requestId: descriptorResult.requestId
 			});
-			const etag = await putPart(runtime, descriptor, slicePart(validated.source, start, end, expectedByteLength), checksumSha256, validated.signal);
+			const etag = await putPart(runtime, descriptor, slicePart(validated.source, start, end, expectedByteLength), validated.signal);
 			revision = await recordPartWithReconciliation(controls, validated, session, partNumber, revision, expectedByteLength, etag, checksumSha256);
 			confirmedByteLength += expectedByteLength;
 			confirmedPartCount += 1;
 			emitProgress(validated.onProgress, "uploading", confirmedByteLength, validated.byteLength, confirmedPartCount, totalPartCount);
 		}
 		emitProgress(validated.onProgress, "completing", confirmedByteLength, validated.byteLength, confirmedPartCount, totalPartCount);
-		return await completeWithReconciliation(controls, validated, session, digests);
+		const completed = await completeWithReconciliation(controls, validated, session, digests);
+		if (completed.data.state === "verifying") emitProgress(validated.onProgress, "verifying", confirmedByteLength, validated.byteLength, confirmedPartCount, totalPartCount);
+		return completed;
 	} catch (error) {
 		if (validated.signal?.aborted && session) await bestEffortAbort(controls, validated.workspaceId, session.uploadId);
 		if (error instanceof DriveError) throw error;
@@ -2977,6 +3275,7 @@ async function readResumeState(controls, input, session, digests) {
 	if (session.mode === "presigned-multipart" && [
 		"completing",
 		"provider-completed",
+		"verifying",
 		"ready"
 	].includes(baseline.lifecycle) && confirmedParts.size !== session.partCount) throw new DriveError("invalid_response");
 	failForTerminalStatus(baseline.lifecycle, baselineRequestId);
@@ -3033,7 +3332,8 @@ async function completeWithReconciliation(controls, input, session, digests) {
 			idempotencyKey: input.completionIdempotencyKey,
 			...input.signal === void 0 ? {} : { signal: input.signal }
 		});
-		assertReadyMatchesInput(completed.data, session, input, digests, completed.requestId);
+		if (completed.data.state === "ready") assertReadyMatchesInput(completed.data, session, input, digests, completed.requestId);
+		else if (completed.data.itemId !== session.itemId || completed.data.versionId !== session.versionId || completed.data.uploadId !== session.uploadId || completed.data.totalByteLength !== input.byteLength) throw new DriveError("invalid_response");
 		return completed;
 	} catch (error) {
 		if (!isAmbiguousControlFailure(error) || input.signal?.aborted) throw error;
@@ -3054,6 +3354,7 @@ async function completeWithReconciliation(controls, input, session, digests) {
 async function hashSource(source, byteLength, partCount, signal) {
 	const fullHash = sha256.create();
 	const partChecksums = [];
+	const partMd5s = [];
 	for (let index = 0; index < partCount; index += 1) {
 		throwIfCallerAborted(signal);
 		const start = index * UPLOAD_PART_BYTE_LENGTH;
@@ -3070,13 +3371,15 @@ async function hashSource(source, byteLength, partCount, signal) {
 		const bytes = new Uint8Array(buffer);
 		fullHash.update(bytes);
 		partChecksums.push(toBase64(sha256(bytes)));
+		partMd5s.push(toBase64(md5(bytes)));
 	}
 	return Object.freeze({
 		callerDeclaredContentDigest: `sha256:${bytesToHex(fullHash.digest())}`,
-		partChecksums: Object.freeze(partChecksums)
+		partChecksums: Object.freeze(partChecksums),
+		partMd5s: Object.freeze(partMd5s)
 	});
 }
-async function putPart(runtime, descriptor, part, checksumSha256, callerSignal) {
+async function putPart(runtime, descriptor, part, callerSignal) {
 	const remainingMilliseconds = descriptor.expiresAtEpochMilliseconds - Date.now();
 	if (remainingMilliseconds < 1) throw new DriveError("invalid_response");
 	const operation = createOperationSignal(callerSignal, Math.min(runtime.timeoutMilliseconds, remainingMilliseconds));
@@ -3094,8 +3397,9 @@ async function putPart(runtime, descriptor, part, checksumSha256, callerSignal)
 		}), operation.signal);
 		if (!(response instanceof Response)) throw new DriveError("invalid_response");
 		const etag = response.headers.get("etag");
-		const responseChecksum = response.headers.get("x-amz-checksum-sha256");
-		if (response.status < 200 || response.status > 299 || !isEtag(etag) || responseChecksum !== checksumSha256) throw new DriveError("invalid_response", { status: response.status });
+		const md5Response = response.headers.get("content-md5");
+		const checksumMatches = md5Response === null || md5Response === descriptor.headers["content-md5"];
+		if (response.status < 200 || response.status > 299 || !isEtag(etag) || !checksumMatches) throw new DriveError("invalid_response", { status: response.status });
 		return etag;
 	} catch (error) {
 		if (operation.didTimeout()) throw new DriveError("timeout");
@@ -3131,7 +3435,7 @@ function failForTerminalStatus(lifecycle, requestId) {
 		status: 409,
 		...requestId === void 0 ? {} : { requestId }
 	});
-	if (lifecycle === "aborting" || lifecycle === "aborted") throw new DriveError("precondition_failed", {
+	if (lifecycle === "aborting" || lifecycle === "aborted" || lifecycle === "failed") throw new DriveError("precondition_failed", {
 		status: 409,
 		...requestId === void 0 ? {} : { requestId }
 	});

package/dist/server.d.ts

@@ -1,4 +1,4 @@
-import { $ as UpdateItemInput, A as ListItemVersionsInput, C as FolderPage, D as GetUploadStatusInput, E as GetItemVersionInput, F as ManagedItemVersionPage, I as ManagedItemVersionResource, J as RestoreItemInput, K as ReadyUpload, L as ManagedItemVersionRestoreResult, M as ManagedDownloadRestorePending, N as ManagedItemMetadata, O as ListFolderChildrenInput, P as ManagedItemVersion, Q as TrashItemInput, R as ManagedLifecycleItem, S as FolderItem, T as GetItemInput, W as ProtectionClassification, Y as RestoreItemVersionInput, Z as SearchWorkspaceItemsInput, c as CurrentWorkspace, ct as UploadSession, dt as WorkspaceItemSearchPage, ft as operations, h as DriveOperationResult, j as ManagedDownloadDescriptor, l as DeleteItemInput, lt as UploadStatus, m as DriveCredentialProvider, n as CompleteUploadInput, o as CreateUploadInput, ot as UploadPartDescriptor, q as RecordUploadPartInput, r as CreateDownloadInput, s as CreateUploadPartDescriptorInput, st as UploadPartResult, t as AbortUploadInput, tt as UploadConfirmedPart, u as DownloadItemResult, ut as WorkspaceItemSearchItem, v as DriveServerClient, w as GetCurrentWorkspaceInput, y as DriveServerClientConfig } from "./contract.js";
+import { $ as RestoreItemVersionInput, A as ListFolderChildrenInput, B as ManagedItemVersionRestoreResult, C as FolderItem, D as GetItemVersionInput, E as GetItemInput, F as ManagedDownloadRestorePending, H as PendingUpload, I as ManagedItemMetadata, J as ProtectionClassification, L as ManagedItemVersion, M as ListItemVersionsInput, N as ListWorkspaceItemsInput, O as GetUploadStatusInput, P as ManagedDownloadDescriptor, Q as RestoreItemInput, R as ManagedItemVersionPage, T as GetCurrentWorkspaceInput, V as ManagedLifecycleItem, X as ReadyUpload, Z as RecordUploadPartInput, _t as WorkspaceItemSearchItem, at as UploadCompletion, b as DriveServerClientConfig, bt as operations, c as CurrentWorkspace, d as DownloadItemResult, dt as UploadPartDescriptor, ft as UploadPartResult, g as DriveOperationResult, gt as WorkspaceDiscoveryPage, h as DriveCredentialProvider, ht as WorkspaceDiscoveryItem, k as GetWorkspaceUsageInput, l as CurrentWorkspaceSources, mt as UploadStatus, n as CompleteUploadInput, nt as TrashItemInput, o as CreateUploadInput, ot as UploadConfirmedPart, pt as UploadSession, r as CreateDownloadInput, rt as UpdateItemInput, s as CreateUploadPartDescriptorInput, t as AbortUploadInput, tt as SearchWorkspaceItemsInput, u as DeleteItemInput, vt as WorkspaceItemSearchPage, w as FolderPage, y as DriveServerClient, yt as WorkspaceUsage, z as ManagedItemVersionResource } from "./contract.js";
 //#region src/internal/provisioning.d.ts
 type Operation = operations["provisionManagedWorkspace"];
 type ProvisionWorkspaceCommand = Operation["requestBody"]["content"]["application/json"];
@@ -20,4 +20,4 @@ declare function createDriveProvisioningClient(config: DriveProvisioningClientCo
 //#region src/server.d.ts
 declare function createDriveServerClient(config: DriveServerClientConfig): DriveServerClient;
 //#endregion
-export { type AbortUploadInput, type CompleteUploadInput, type CreateDownloadInput, type CreateUploadInput, type CreateUploadPartDescriptorInput, type CurrentWorkspace, type DeleteItemInput, type DownloadItemResult, type DriveProvisioningClient, type DriveProvisioningClientConfig, type DriveServerClient, type DriveServerClientConfig, type FolderItem, type FolderPage, type GetCurrentWorkspaceInput, type GetItemInput, type GetItemVersionInput, type GetUploadStatusInput, type ListFolderChildrenInput, type ListItemVersionsInput, type ManagedDownloadDescriptor, type ManagedDownloadRestorePending, type ManagedItemMetadata, type ManagedItemVersion, type ManagedItemVersionPage, type ManagedItemVersionResource, type ManagedItemVersionRestoreResult, type ManagedLifecycleItem, type ProtectionClassification, type ProvisionWorkspaceCommand, type ProvisionWorkspaceResult, type ReadyUpload, type RecordUploadPartInput, type RestoreItemInput, type RestoreItemVersionInput, type SearchWorkspaceItemsInput, type TrashItemInput, type UpdateItemInput, type UploadConfirmedPart, type UploadPartDescriptor, type UploadPartResult, type UploadSession, type UploadStatus, type WorkspaceItemSearchItem, type WorkspaceItemSearchPage, createDriveProvisioningClient, createDriveServerClient };
+export { type AbortUploadInput, type CompleteUploadInput, type CreateDownloadInput, type CreateUploadInput, type CreateUploadPartDescriptorInput, type CurrentWorkspace, type CurrentWorkspaceSources, type DeleteItemInput, type DownloadItemResult, type DriveProvisioningClient, type DriveProvisioningClientConfig, type DriveServerClient, type DriveServerClientConfig, type FolderItem, type FolderPage, type GetCurrentWorkspaceInput, type GetItemInput, type GetItemVersionInput, type GetUploadStatusInput, type GetWorkspaceUsageInput, type ListFolderChildrenInput, type ListItemVersionsInput, type ListWorkspaceItemsInput, type ManagedDownloadDescriptor, type ManagedDownloadRestorePending, type ManagedItemMetadata, type ManagedItemVersion, type ManagedItemVersionPage, type ManagedItemVersionResource, type ManagedItemVersionRestoreResult, type ManagedLifecycleItem, type PendingUpload, type ProtectionClassification, type ProvisionWorkspaceCommand, type ProvisionWorkspaceResult, type ReadyUpload, type RecordUploadPartInput, type RestoreItemInput, type RestoreItemVersionInput, type SearchWorkspaceItemsInput, type TrashItemInput, type UpdateItemInput, type UploadCompletion, type UploadConfirmedPart, type UploadPartDescriptor, type UploadPartResult, type UploadSession, type UploadStatus, type WorkspaceDiscoveryItem, type WorkspaceDiscoveryPage, type WorkspaceItemSearchItem, type WorkspaceItemSearchPage, type WorkspaceUsage, createDriveProvisioningClient, createDriveServerClient };