@crowi/api-contract 2.0.0-alpha.0 → 2.0.0-alpha.2

package/dist/index.js

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   ALL_SCOPES: () => ALL_SCOPES,
+  API_SURFACE_VERSION: () => API_SURFACE_VERSION,
   AccessTokenSchema: () => AccessTokenSchema,
   ActivateRequestSchema: () => ActivateRequestSchema,
   ActivateValidationResponseSchema: () => ActivateValidationResponseSchema,
@@ -131,6 +132,7 @@ __export(index_exports, {
   InviteUsersRequestSchema: () => InviteUsersRequestSchema,
   InviteUsersResponseSchema: () => InviteUsersResponseSchema,
   InvitedUserResultSchema: () => InvitedUserResultSchema,
+  KNOWN_HTML_ELEMENTS: () => KNOWN_HTML_ELEMENTS,
   LanguageSchema: () => LanguageSchema,
   LikerSchema: () => LikerSchema,
   LikersResponseSchema: () => LikersResponseSchema,
@@ -229,6 +231,7 @@ __export(index_exports, {
   RenameTreeErrorSchema: () => RenameTreeErrorSchema,
   ResetPasswordRequestSchema: () => ResetPasswordRequestSchema,
   ResetPasswordResponseSchema: () => ResetPasswordResponseSchema,
+  RevertToRevisionRequestSchema: () => RevertToRevisionRequestSchema,
   RevisionInvalidRequestErrorSchema: () => RevisionInvalidRequestErrorSchema,
   RevisionMetaSchema: () => RevisionMetaSchema,
   RevisionMetaSchemaShape: () => RevisionMetaSchemaShape,
@@ -237,6 +240,8 @@ __export(index_exports, {
   RevokeRequestSchema: () => RevokeRequestSchema,
   RevokeResponseSchema: () => RevokeResponseSchema,
   SCOPES: () => SCOPES,
+  STATIC_CAPABILITIES: () => STATIC_CAPABILITIES,
+  STRIP_KNOWN_HTML_TAGS_MAX_LENGTH: () => STRIP_KNOWN_HTML_TAGS_MAX_LENGTH,
   SearchAdminUsersByEmailRequestSchema: () => SearchAdminUsersByEmailRequestSchema,
   SearchAdminUsersByEmailResponseSchema: () => SearchAdminUsersByEmailResponseSchema,
   SearchDriverEntrySchema: () => SearchDriverEntrySchema,
@@ -417,8 +422,10 @@ __export(index_exports, {
   removeFromAdminRoute: () => removeFromAdminRoute,
   renamePageRoute: () => renamePageRoute,
   renameSubtreeRoute: () => renameSubtreeRoute,
+  resendInviteRoute: () => resendInviteRoute,
   resetPasswordRoute: () => resetPasswordRoute,
   revertDeletedPageRoute: () => revertDeletedPageRoute,
+  revertToRevisionRoute: () => revertToRevisionRoute,
   revisionRoutes: () => revisionRoutes,
   revokeRoute: () => revokeRoute,
   scopeSatisfies: () => scopeSatisfies,
@@ -430,6 +437,7 @@ __export(index_exports, {
   sendTestMailRoute: () => sendTestMailRoute,
   setPageGrantRoute: () => setPageGrantRoute,
   setWatchStatusRoute: () => setWatchStatusRoute,
+  stripKnownHtmlTags: () => stripKnownHtmlTags,
   suspendUserRoute: () => suspendUserRoute,
   tokenAuthRoutes: () => tokenAuthRoutes,
   tokenLoginRoute: () => tokenLoginRoute,
@@ -483,6 +491,7 @@ var ERROR_CODES = [
   "PAGE_NOT_FOUND",
   "PAGE_NOT_GRANTED",
   "PAGE_REVISION_ERROR",
+  "PAGE_TWIN_EXISTS",
   "INVALID_GRANT",
   // --- comment / notification domain ---
   "COMMENT_NOT_FOUND",
@@ -511,6 +520,152 @@ var ERROR_CODES = [
 ];
 var ErrorCodeSchema = import_zod_openapi.z.enum(ERROR_CODES).openapi("ErrorCode");
 
+// src/util/html-elements.ts
+var KNOWN_HTML_ELEMENTS = /* @__PURE__ */ new Set([
+  "a",
+  "abbr",
+  "acronym",
+  "address",
+  "applet",
+  "area",
+  "article",
+  "aside",
+  "audio",
+  "b",
+  "base",
+  "basefont",
+  "bdi",
+  "bdo",
+  "big",
+  "blink",
+  "blockquote",
+  "body",
+  "br",
+  "button",
+  "canvas",
+  "caption",
+  "center",
+  "cite",
+  "code",
+  "col",
+  "colgroup",
+  "data",
+  "datalist",
+  "dd",
+  "del",
+  "details",
+  "dfn",
+  "dialog",
+  "dir",
+  "div",
+  "dl",
+  "dt",
+  "em",
+  "embed",
+  "fieldset",
+  "figcaption",
+  "figure",
+  "font",
+  "footer",
+  "form",
+  "frame",
+  "frameset",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  "head",
+  "header",
+  "hgroup",
+  "hr",
+  "html",
+  "i",
+  "iframe",
+  "img",
+  "input",
+  "ins",
+  "kbd",
+  "label",
+  "legend",
+  "li",
+  "link",
+  "listing",
+  "main",
+  "map",
+  "mark",
+  "marquee",
+  "menu",
+  "menuitem",
+  "meta",
+  "meter",
+  "nav",
+  "nobr",
+  "noembed",
+  "noframes",
+  "noscript",
+  "object",
+  "ol",
+  "optgroup",
+  "option",
+  "output",
+  "p",
+  "param",
+  "picture",
+  "pre",
+  "progress",
+  "q",
+  "rb",
+  "rp",
+  "rt",
+  "rtc",
+  "ruby",
+  "s",
+  "samp",
+  "script",
+  "search",
+  "section",
+  "select",
+  "slot",
+  "small",
+  "source",
+  "span",
+  "strike",
+  "strong",
+  "style",
+  "sub",
+  "summary",
+  "sup",
+  "svg",
+  "table",
+  "tbody",
+  "td",
+  "template",
+  "textarea",
+  "tfoot",
+  "th",
+  "thead",
+  "time",
+  "title",
+  "tr",
+  "track",
+  "tt",
+  "u",
+  "ul",
+  "var",
+  "video",
+  "wbr",
+  "xmp"
+]);
+var KNOWN_HTML_TAG_REGEX = new RegExp(`</?(?:${[...KNOWN_HTML_ELEMENTS].join("|")})(?![\\w-])(?:[^>"']|"[^"]*"|'[^']*')*>`, "gi");
+var STRIP_KNOWN_HTML_TAGS_MAX_LENGTH = 4096;
+function stripKnownHtmlTags(text) {
+  if (text.length > STRIP_KNOWN_HTML_TAGS_MAX_LENGTH) return text;
+  KNOWN_HTML_TAG_REGEX.lastIndex = 0;
+  return text.replace(KNOWN_HTML_TAG_REGEX, "");
+}
+
 // src/contracts/app.ts
 var import_zod_openapi4 = require("@hono/zod-openapi");
 
@@ -610,7 +765,11 @@ var ForbiddenErrorSchema = ApiErrorSchema.extend({
 var import_zod_openapi3 = require("@hono/zod-openapi");
 var AppInfoResponseSchema = import_zod_openapi3.z.object({
   title: import_zod_openapi3.z.string().nullable(),
-  confidential: import_zod_openapi3.z.string().nullable()
+  confidential: import_zod_openapi3.z.string().nullable(),
+  version: import_zod_openapi3.z.string(),
+  apiVersion: import_zod_openapi3.z.string(),
+  capabilities: import_zod_openapi3.z.array(import_zod_openapi3.z.string()),
+  canSelfRegister: import_zod_openapi3.z.boolean()
 });
 
 // src/contracts/app.ts
@@ -1507,7 +1666,12 @@ var ListPagesRequestSchema = import_zod_openapi19.z.object({
   // "newest-updated first" order so existing callers are unaffected.
   // `path` sorts alphabetically by full page path (≈ name order).
   sort: import_zod_openapi19.z.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
-  order: import_zod_openapi19.z.enum(["asc", "desc"]).optional().default("desc")
+  order: import_zod_openapi19.z.enum(["asc", "desc"]).optional().default("desc"),
+  // When listing a portal path (`/foo/`), open the portal document at this
+  // past revision so the catch-all can mirror `?revision_id=` on portals.
+  // Only the `portalPage` is rewound — the child rows always reflect the
+  // latest. Absent for normal listings.
+  revision_id: import_zod_openapi19.z.string().optional()
 });
 var PagerSchema = import_zod_openapi19.z.object({
   prev: import_zod_openapi19.z.number().nullable(),
@@ -1517,7 +1681,15 @@ var PagerSchema = import_zod_openapi19.z.object({
 var ListPagesResponseSchema = import_zod_openapi19.z.object({
   pages: import_zod_openapi19.z.array(PageSchema),
   pager: PagerSchema,
-  portalPage: PageSchema.nullable().optional()
+  portalPage: PageSchema.nullable().optional(),
+  // When listing a portal path (`/foo/`) that has NO portal document of
+  // its own but a content page DOES live at the stripped path (`/foo`),
+  // this carries that content page. The list view uses it to suppress the
+  // "Create Portal" CTA and surface a "portalize this page" banner instead
+  // (feature-update-pages-list-ux §4). Mutually exclusive with `portalPage`
+  // — only set when `portalPage` is null. Absent / null for ordinary
+  // listings.
+  contentPage: PageSchema.nullable().optional()
 });
 var PageChildSegmentSchema = import_zod_openapi19.z.object({
   // The bare segment name immediately under the queried path
@@ -1558,6 +1730,10 @@ var UpdatePageRequestSchema = import_zod_openapi19.z.object({
   revision_id: import_zod_openapi19.z.string().optional(),
   grant: import_zod_openapi19.z.number().optional()
 });
+var RevertToRevisionRequestSchema = import_zod_openapi19.z.object({
+  page_id: import_zod_openapi19.z.string(),
+  revision_id: import_zod_openapi19.z.string()
+});
 var SetPageGrantRequestSchema = import_zod_openapi19.z.object({
   page_id: import_zod_openapi19.z.string(),
   grant: import_zod_openapi19.z.number().int()
@@ -3716,6 +3892,36 @@ var revertDeletedPageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
+var revertToRevisionRoute = (0, import_zod_openapi39.createRoute)({
+  method: "post",
+  path: "/pages/revert-to-revision",
+  tags: ["page"],
+  security: [{ bearerAuth: [] }],
+  summary: "Revert a page to one of its past revisions (non-destructive \u2014 stacks a new revision)",
+  request: {
+    body: {
+      content: { "application/json": { schema: RevertToRevisionRequestSchema } }
+    }
+  },
+  responses: {
+    200: {
+      description: "The page with the reverted body as its new latest revision",
+      content: { "application/json": { schema: PageResponseSchema } }
+    },
+    400: {
+      description: "PAGE_REVERT_TO_REVISION_FAILED (e.g. the revision does not belong to the page)",
+      content: { "application/json": { schema: PageBadRequestErrorSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    404: {
+      description: "Page not found (also covers grant-denied)",
+      content: { "application/json": { schema: PageNotFoundErrorSchema } }
+    }
+  }
+});
 var renamePageRoute = (0, import_zod_openapi39.createRoute)({
   method: "post",
   path: "/pages/rename",
@@ -3813,6 +4019,8 @@ var pageRoutes = {
   deletePageRoute,
   // POST /pages/revert — revertDeletedPage
   revertDeletedPageRoute,
+  // POST /pages/revert-to-revision — revertToRevision
+  revertToRevisionRoute,
   // POST /pages/rename — renamePage
   renamePageRoute,
   // POST /pages/rename-subtree — renameSubtree (portal-less folder)
@@ -5959,6 +6167,46 @@ var resetPasswordRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
+var resendInviteRoute = (0, import_zod_openapi71.createRoute)({
+  method: "post",
+  path: "/admin/users/{id}/resend-invite",
+  tags: ["admin.users"],
+  security: [{ bearerAuth: [] }],
+  summary: "Re-issue an invite token and resend the invitation email (INVITED status only)",
+  request: {
+    params: AdminUserIdParamSchema
+  },
+  responses: {
+    200: {
+      description: "Invitation email resent; returns the (unchanged) user",
+      content: { "application/json": { schema: AdminUserMutationResponseSchema } }
+    },
+    400: {
+      description: "Invalid id",
+      content: { "application/json": { schema: ValidationErrorSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    403: {
+      description: "Admin permission required",
+      content: { "application/json": { schema: AdminRequiredErrorSchema } }
+    },
+    404: {
+      description: "User not found",
+      content: { "application/json": { schema: NotFoundErrorSchema } }
+    },
+    409: {
+      description: "User is not in the INVITED status, so there is no pending invite to resend",
+      content: { "application/json": { schema: ConflictErrorSchema } }
+    },
+    500: {
+      description: "Internal server error (e.g. the invitation email failed to send)",
+      content: { "application/json": { schema: InternalServerErrorSchema } }
+    }
+  }
+});
 var updateUserEmailRoute = (0, import_zod_openapi71.createRoute)({
   method: "put",
   path: "/admin/users/{id}/email",
@@ -6077,6 +6325,7 @@ var adminUsersRoutes = {
   activateUserRoute,
   suspendUserRoute,
   resetPasswordRoute,
+  resendInviteRoute,
   updateUserEmailRoute,
   pendingUsersCountRoute,
   deleteUserRoute
@@ -6342,7 +6591,10 @@ var stubListPlugins = { plugins: [] };
 var stubPluginConfig = { name: "", fields: [], values: {} };
 var stubUpdatePluginConfig = { ok: true, hotReloaded: false, reconfigureFailed: false };
 var stubClearRenderCache = { ok: true, clearedAt: "", removedCount: 0 };
-var appAuthMeUserChain = new import_zod_openapi72.OpenAPIHono().openapi(appRoutes.getAppInfoRoute, (c) => c.json({ title: null, confidential: null }, 200)).openapi(installerRoutes.getInstallerStatusRoute, (c) => c.json({ status: "installer_required" }, 200)).openapi(installerRoutes.createAdminRoute, (c) => c.json({ status: "ok" }, 200)).openapi(tokenAuthRoutes.tokenLoginRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenRegisterRoute, (c) => c.json({ status: "confirmation_required" }, 200)).openapi(inviteAcceptRoutes.invitePreviewRoute, (c) => c.json({ email: "stub@example.com" }, 200)).openapi(inviteAcceptRoutes.acceptInviteRoute, (c) => c.json(stubTokens, 200)).openapi(passwordResetRoutes.forgotPasswordRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.validateResetTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.selfResetPasswordRoute, (c) => c.json(stubTokens, 200)).openapi(activationRoutes.validateActivationTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(activationRoutes.activateAccountRoute, (c) => c.json(stubTokens, 200)).openapi(emailChangeRoutes.validateEmailChangeTokenRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(emailChangeRoutes.confirmEmailChangeRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(tokenAuthRoutes.tokenRefreshRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenLogoutRoute, (c) => c.json({ message: "" }, 200)).openapi(
+var appAuthMeUserChain = new import_zod_openapi72.OpenAPIHono().openapi(
+  appRoutes.getAppInfoRoute,
+  (c) => c.json({ title: null, confidential: null, version: "", apiVersion: "v2", capabilities: [], canSelfRegister: true }, 200)
+).openapi(installerRoutes.getInstallerStatusRoute, (c) => c.json({ status: "installer_required" }, 200)).openapi(installerRoutes.createAdminRoute, (c) => c.json({ status: "ok" }, 200)).openapi(tokenAuthRoutes.tokenLoginRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenRegisterRoute, (c) => c.json({ status: "confirmation_required" }, 200)).openapi(inviteAcceptRoutes.invitePreviewRoute, (c) => c.json({ email: "stub@example.com" }, 200)).openapi(inviteAcceptRoutes.acceptInviteRoute, (c) => c.json(stubTokens, 200)).openapi(passwordResetRoutes.forgotPasswordRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.validateResetTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.selfResetPasswordRoute, (c) => c.json(stubTokens, 200)).openapi(activationRoutes.validateActivationTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(activationRoutes.activateAccountRoute, (c) => c.json(stubTokens, 200)).openapi(emailChangeRoutes.validateEmailChangeTokenRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(emailChangeRoutes.confirmEmailChangeRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(tokenAuthRoutes.tokenRefreshRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenLogoutRoute, (c) => c.json({ message: "" }, 200)).openapi(
   tokenAuthRoutes.tokenMeRoute,
   (c) => c.json(
     {
@@ -6360,16 +6612,33 @@ var appAuthMeUserChain = new import_zod_openapi72.OpenAPIHono().openapi(appRoute
   )
 ).openapi(meRoutes.getProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateThemeRoute, (c) => c.json({ status: "ok", theme: "system" }, 200)).openapi(meRoutes.uploadPictureRoute, (c) => c.json({ status: true }, 200)).openapi(meRoutes.deletePictureRoute, (c) => c.json({ status: "ok" }, 200)).openapi(meRoutes.updatePasswordRoute, (c) => c.json({ status: "ok", message: "" }, 200)).openapi(meRoutes.recentlyViewedPagesRoute, (c) => c.json({ pages: [] }, 200)).openapi(accessTokenRoutes.listAccessTokensRoute, (c) => c.json({ accessTokens: [] }, 200)).openapi(accessTokenRoutes.createAccessTokenRoute, (c) => c.json(stubCreateAccessToken, 201)).openapi(accessTokenRoutes.deleteAccessTokenRoute, (c) => c.json(stubAccessToken, 200)).openapi(userRoutes.getUserPageRoute, (c) => c.json(stubUserPage, 200)).openapi(userRoutes.getUserBookmarksRoute, (c) => c.json(stubUserBookmarks, 200)).openapi(userRoutes.getUserPagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.listMembersRoute, (c) => c.json(stubListUsers, 200));
 var bookmarkBacklinkCommentRevisionChain = new import_zod_openapi72.OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
-var pageChain = new import_zod_openapi72.OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
+var pageChain = new import_zod_openapi72.OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
 var lateContractApp = new import_zod_openapi72.OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
 var adminSettingsContractApp = new import_zod_openapi72.OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
-var adminUsersPluginsContractApp = new import_zod_openapi72.OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
+var adminUsersPluginsContractApp = new import_zod_openapi72.OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
 var oauthContractApp = new import_zod_openapi72.OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200));
 var createClient = (baseUrl, options = {}) => (0, import_client.hc)(baseUrl, {
   headers: options.headers,
   fetch: options.fetch
 });
 
+// src/schemas/app-capabilities.ts
+var STATIC_CAPABILITIES = [
+  "oauth",
+  // The oauth:* tags mirror GRANT_TYPES_SUPPORTED + the S256 PKCE method
+  // (schemas/oauth-endpoints.ts / the RFC 8414 discovery doc). Keep in sync.
+  "oauth:auth-code",
+  "oauth:device",
+  "oauth:pkce",
+  "pat",
+  "pages",
+  "comments",
+  "bookmarks",
+  "attachments",
+  "notifications"
+];
+var API_SURFACE_VERSION = "v2";
+
 // src/schemas/mail-token.ts
 var import_zod_openapi73 = require("@hono/zod-openapi");
 var MailTokenPurposeSchema = import_zod_openapi73.z.enum(["invite", "activate", "reset", "email-change"]);
@@ -6391,6 +6660,7 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ALL_SCOPES,
+  API_SURFACE_VERSION,
   AccessTokenSchema,
   ActivateRequestSchema,
   ActivateValidationResponseSchema,
@@ -6501,6 +6771,7 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   InviteUsersRequestSchema,
   InviteUsersResponseSchema,
   InvitedUserResultSchema,
+  KNOWN_HTML_ELEMENTS,
   LanguageSchema,
   LikerSchema,
   LikersResponseSchema,
@@ -6599,6 +6870,7 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   RenameTreeErrorSchema,
   ResetPasswordRequestSchema,
   ResetPasswordResponseSchema,
+  RevertToRevisionRequestSchema,
   RevisionInvalidRequestErrorSchema,
   RevisionMetaSchema,
   RevisionMetaSchemaShape,
@@ -6607,6 +6879,8 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   RevokeRequestSchema,
   RevokeResponseSchema,
   SCOPES,
+  STATIC_CAPABILITIES,
+  STRIP_KNOWN_HTML_TAGS_MAX_LENGTH,
   SearchAdminUsersByEmailRequestSchema,
   SearchAdminUsersByEmailResponseSchema,
   SearchDriverEntrySchema,
@@ -6787,8 +7061,10 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   removeFromAdminRoute,
   renamePageRoute,
   renameSubtreeRoute,
+  resendInviteRoute,
   resetPasswordRoute,
   revertDeletedPageRoute,
+  revertToRevisionRoute,
   revisionRoutes,
   revokeRoute,
   scopeSatisfies,
@@ -6800,6 +7076,7 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   sendTestMailRoute,
   setPageGrantRoute,
   setWatchStatusRoute,
+  stripKnownHtmlTags,
   suspendUserRoute,
   tokenAuthRoutes,
   tokenLoginRoute,