@crowi/api-contract 2.0.0-alpha.0 → 2.0.0-alpha.2

package/dist/index.mjs

@@ -23,6 +23,7 @@ var ERROR_CODES = [
   "PAGE_NOT_FOUND",
   "PAGE_NOT_GRANTED",
   "PAGE_REVISION_ERROR",
+  "PAGE_TWIN_EXISTS",
   "INVALID_GRANT",
   // --- comment / notification domain ---
   "COMMENT_NOT_FOUND",
@@ -51,6 +52,152 @@ var ERROR_CODES = [
 ];
 var ErrorCodeSchema = z.enum(ERROR_CODES).openapi("ErrorCode");
 
+// src/util/html-elements.ts
+var KNOWN_HTML_ELEMENTS = /* @__PURE__ */ new Set([
+  "a",
+  "abbr",
+  "acronym",
+  "address",
+  "applet",
+  "area",
+  "article",
+  "aside",
+  "audio",
+  "b",
+  "base",
+  "basefont",
+  "bdi",
+  "bdo",
+  "big",
+  "blink",
+  "blockquote",
+  "body",
+  "br",
+  "button",
+  "canvas",
+  "caption",
+  "center",
+  "cite",
+  "code",
+  "col",
+  "colgroup",
+  "data",
+  "datalist",
+  "dd",
+  "del",
+  "details",
+  "dfn",
+  "dialog",
+  "dir",
+  "div",
+  "dl",
+  "dt",
+  "em",
+  "embed",
+  "fieldset",
+  "figcaption",
+  "figure",
+  "font",
+  "footer",
+  "form",
+  "frame",
+  "frameset",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  "head",
+  "header",
+  "hgroup",
+  "hr",
+  "html",
+  "i",
+  "iframe",
+  "img",
+  "input",
+  "ins",
+  "kbd",
+  "label",
+  "legend",
+  "li",
+  "link",
+  "listing",
+  "main",
+  "map",
+  "mark",
+  "marquee",
+  "menu",
+  "menuitem",
+  "meta",
+  "meter",
+  "nav",
+  "nobr",
+  "noembed",
+  "noframes",
+  "noscript",
+  "object",
+  "ol",
+  "optgroup",
+  "option",
+  "output",
+  "p",
+  "param",
+  "picture",
+  "pre",
+  "progress",
+  "q",
+  "rb",
+  "rp",
+  "rt",
+  "rtc",
+  "ruby",
+  "s",
+  "samp",
+  "script",
+  "search",
+  "section",
+  "select",
+  "slot",
+  "small",
+  "source",
+  "span",
+  "strike",
+  "strong",
+  "style",
+  "sub",
+  "summary",
+  "sup",
+  "svg",
+  "table",
+  "tbody",
+  "td",
+  "template",
+  "textarea",
+  "tfoot",
+  "th",
+  "thead",
+  "time",
+  "title",
+  "tr",
+  "track",
+  "tt",
+  "u",
+  "ul",
+  "var",
+  "video",
+  "wbr",
+  "xmp"
+]);
+var KNOWN_HTML_TAG_REGEX = new RegExp(`</?(?:${[...KNOWN_HTML_ELEMENTS].join("|")})(?![\\w-])(?:[^>"']|"[^"]*"|'[^']*')*>`, "gi");
+var STRIP_KNOWN_HTML_TAGS_MAX_LENGTH = 4096;
+function stripKnownHtmlTags(text) {
+  if (text.length > STRIP_KNOWN_HTML_TAGS_MAX_LENGTH) return text;
+  KNOWN_HTML_TAG_REGEX.lastIndex = 0;
+  return text.replace(KNOWN_HTML_TAG_REGEX, "");
+}
+
 // src/contracts/app.ts
 import { createRoute } from "@hono/zod-openapi";
 
@@ -150,7 +297,11 @@ var ForbiddenErrorSchema = ApiErrorSchema.extend({
 import { z as z3 } from "@hono/zod-openapi";
 var AppInfoResponseSchema = z3.object({
   title: z3.string().nullable(),
-  confidential: z3.string().nullable()
+  confidential: z3.string().nullable(),
+  version: z3.string(),
+  apiVersion: z3.string(),
+  capabilities: z3.array(z3.string()),
+  canSelfRegister: z3.boolean()
 });
 
 // src/contracts/app.ts
@@ -1047,7 +1198,12 @@ var ListPagesRequestSchema = z13.object({
   // "newest-updated first" order so existing callers are unaffected.
   // `path` sorts alphabetically by full page path (≈ name order).
   sort: z13.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
-  order: z13.enum(["asc", "desc"]).optional().default("desc")
+  order: z13.enum(["asc", "desc"]).optional().default("desc"),
+  // When listing a portal path (`/foo/`), open the portal document at this
+  // past revision so the catch-all can mirror `?revision_id=` on portals.
+  // Only the `portalPage` is rewound — the child rows always reflect the
+  // latest. Absent for normal listings.
+  revision_id: z13.string().optional()
 });
 var PagerSchema = z13.object({
   prev: z13.number().nullable(),
@@ -1057,7 +1213,15 @@ var PagerSchema = z13.object({
 var ListPagesResponseSchema = z13.object({
   pages: z13.array(PageSchema),
   pager: PagerSchema,
-  portalPage: PageSchema.nullable().optional()
+  portalPage: PageSchema.nullable().optional(),
+  // When listing a portal path (`/foo/`) that has NO portal document of
+  // its own but a content page DOES live at the stripped path (`/foo`),
+  // this carries that content page. The list view uses it to suppress the
+  // "Create Portal" CTA and surface a "portalize this page" banner instead
+  // (feature-update-pages-list-ux §4). Mutually exclusive with `portalPage`
+  // — only set when `portalPage` is null. Absent / null for ordinary
+  // listings.
+  contentPage: PageSchema.nullable().optional()
 });
 var PageChildSegmentSchema = z13.object({
   // The bare segment name immediately under the queried path
@@ -1098,6 +1262,10 @@ var UpdatePageRequestSchema = z13.object({
   revision_id: z13.string().optional(),
   grant: z13.number().optional()
 });
+var RevertToRevisionRequestSchema = z13.object({
+  page_id: z13.string(),
+  revision_id: z13.string()
+});
 var SetPageGrantRequestSchema = z13.object({
   page_id: z13.string(),
   grant: z13.number().int()
@@ -3256,6 +3424,36 @@ var revertDeletedPageRoute = createRoute17({
     }
   }
 });
+var revertToRevisionRoute = createRoute17({
+  method: "post",
+  path: "/pages/revert-to-revision",
+  tags: ["page"],
+  security: [{ bearerAuth: [] }],
+  summary: "Revert a page to one of its past revisions (non-destructive \u2014 stacks a new revision)",
+  request: {
+    body: {
+      content: { "application/json": { schema: RevertToRevisionRequestSchema } }
+    }
+  },
+  responses: {
+    200: {
+      description: "The page with the reverted body as its new latest revision",
+      content: { "application/json": { schema: PageResponseSchema } }
+    },
+    400: {
+      description: "PAGE_REVERT_TO_REVISION_FAILED (e.g. the revision does not belong to the page)",
+      content: { "application/json": { schema: PageBadRequestErrorSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    404: {
+      description: "Page not found (also covers grant-denied)",
+      content: { "application/json": { schema: PageNotFoundErrorSchema } }
+    }
+  }
+});
 var renamePageRoute = createRoute17({
   method: "post",
   path: "/pages/rename",
@@ -3353,6 +3551,8 @@ var pageRoutes = {
   deletePageRoute,
   // POST /pages/revert — revertDeletedPage
   revertDeletedPageRoute,
+  // POST /pages/revert-to-revision — revertToRevision
+  revertToRevisionRoute,
   // POST /pages/rename — renamePage
   renamePageRoute,
   // POST /pages/rename-subtree — renameSubtree (portal-less folder)
@@ -5499,6 +5699,46 @@ var resetPasswordRoute = createRoute33({
     }
   }
 });
+var resendInviteRoute = createRoute33({
+  method: "post",
+  path: "/admin/users/{id}/resend-invite",
+  tags: ["admin.users"],
+  security: [{ bearerAuth: [] }],
+  summary: "Re-issue an invite token and resend the invitation email (INVITED status only)",
+  request: {
+    params: AdminUserIdParamSchema
+  },
+  responses: {
+    200: {
+      description: "Invitation email resent; returns the (unchanged) user",
+      content: { "application/json": { schema: AdminUserMutationResponseSchema } }
+    },
+    400: {
+      description: "Invalid id",
+      content: { "application/json": { schema: ValidationErrorSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    403: {
+      description: "Admin permission required",
+      content: { "application/json": { schema: AdminRequiredErrorSchema } }
+    },
+    404: {
+      description: "User not found",
+      content: { "application/json": { schema: NotFoundErrorSchema } }
+    },
+    409: {
+      description: "User is not in the INVITED status, so there is no pending invite to resend",
+      content: { "application/json": { schema: ConflictErrorSchema } }
+    },
+    500: {
+      description: "Internal server error (e.g. the invitation email failed to send)",
+      content: { "application/json": { schema: InternalServerErrorSchema } }
+    }
+  }
+});
 var updateUserEmailRoute = createRoute33({
   method: "put",
   path: "/admin/users/{id}/email",
@@ -5617,6 +5857,7 @@ var adminUsersRoutes = {
   activateUserRoute,
   suspendUserRoute,
   resetPasswordRoute,
+  resendInviteRoute,
   updateUserEmailRoute,
   pendingUsersCountRoute,
   deleteUserRoute
@@ -5882,7 +6123,10 @@ var stubListPlugins = { plugins: [] };
 var stubPluginConfig = { name: "", fields: [], values: {} };
 var stubUpdatePluginConfig = { ok: true, hotReloaded: false, reconfigureFailed: false };
 var stubClearRenderCache = { ok: true, clearedAt: "", removedCount: 0 };
-var appAuthMeUserChain = new OpenAPIHono().openapi(appRoutes.getAppInfoRoute, (c) => c.json({ title: null, confidential: null }, 200)).openapi(installerRoutes.getInstallerStatusRoute, (c) => c.json({ status: "installer_required" }, 200)).openapi(installerRoutes.createAdminRoute, (c) => c.json({ status: "ok" }, 200)).openapi(tokenAuthRoutes.tokenLoginRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenRegisterRoute, (c) => c.json({ status: "confirmation_required" }, 200)).openapi(inviteAcceptRoutes.invitePreviewRoute, (c) => c.json({ email: "stub@example.com" }, 200)).openapi(inviteAcceptRoutes.acceptInviteRoute, (c) => c.json(stubTokens, 200)).openapi(passwordResetRoutes.forgotPasswordRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.validateResetTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.selfResetPasswordRoute, (c) => c.json(stubTokens, 200)).openapi(activationRoutes.validateActivationTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(activationRoutes.activateAccountRoute, (c) => c.json(stubTokens, 200)).openapi(emailChangeRoutes.validateEmailChangeTokenRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(emailChangeRoutes.confirmEmailChangeRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(tokenAuthRoutes.tokenRefreshRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenLogoutRoute, (c) => c.json({ message: "" }, 200)).openapi(
+var appAuthMeUserChain = new OpenAPIHono().openapi(
+  appRoutes.getAppInfoRoute,
+  (c) => c.json({ title: null, confidential: null, version: "", apiVersion: "v2", capabilities: [], canSelfRegister: true }, 200)
+).openapi(installerRoutes.getInstallerStatusRoute, (c) => c.json({ status: "installer_required" }, 200)).openapi(installerRoutes.createAdminRoute, (c) => c.json({ status: "ok" }, 200)).openapi(tokenAuthRoutes.tokenLoginRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenRegisterRoute, (c) => c.json({ status: "confirmation_required" }, 200)).openapi(inviteAcceptRoutes.invitePreviewRoute, (c) => c.json({ email: "stub@example.com" }, 200)).openapi(inviteAcceptRoutes.acceptInviteRoute, (c) => c.json(stubTokens, 200)).openapi(passwordResetRoutes.forgotPasswordRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.validateResetTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.selfResetPasswordRoute, (c) => c.json(stubTokens, 200)).openapi(activationRoutes.validateActivationTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(activationRoutes.activateAccountRoute, (c) => c.json(stubTokens, 200)).openapi(emailChangeRoutes.validateEmailChangeTokenRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(emailChangeRoutes.confirmEmailChangeRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(tokenAuthRoutes.tokenRefreshRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenLogoutRoute, (c) => c.json({ message: "" }, 200)).openapi(
   tokenAuthRoutes.tokenMeRoute,
   (c) => c.json(
     {
@@ -5900,16 +6144,33 @@ var appAuthMeUserChain = new OpenAPIHono().openapi(appRoutes.getAppInfoRoute, (c
   )
 ).openapi(meRoutes.getProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateThemeRoute, (c) => c.json({ status: "ok", theme: "system" }, 200)).openapi(meRoutes.uploadPictureRoute, (c) => c.json({ status: true }, 200)).openapi(meRoutes.deletePictureRoute, (c) => c.json({ status: "ok" }, 200)).openapi(meRoutes.updatePasswordRoute, (c) => c.json({ status: "ok", message: "" }, 200)).openapi(meRoutes.recentlyViewedPagesRoute, (c) => c.json({ pages: [] }, 200)).openapi(accessTokenRoutes.listAccessTokensRoute, (c) => c.json({ accessTokens: [] }, 200)).openapi(accessTokenRoutes.createAccessTokenRoute, (c) => c.json(stubCreateAccessToken, 201)).openapi(accessTokenRoutes.deleteAccessTokenRoute, (c) => c.json(stubAccessToken, 200)).openapi(userRoutes.getUserPageRoute, (c) => c.json(stubUserPage, 200)).openapi(userRoutes.getUserBookmarksRoute, (c) => c.json(stubUserBookmarks, 200)).openapi(userRoutes.getUserPagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.listMembersRoute, (c) => c.json(stubListUsers, 200));
 var bookmarkBacklinkCommentRevisionChain = new OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
-var pageChain = new OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
+var pageChain = new OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
 var lateContractApp = new OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
 var adminSettingsContractApp = new OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
-var adminUsersPluginsContractApp = new OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
+var adminUsersPluginsContractApp = new OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
 var oauthContractApp = new OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200));
 var createClient = (baseUrl, options = {}) => hc(baseUrl, {
   headers: options.headers,
   fetch: options.fetch
 });
 
+// src/schemas/app-capabilities.ts
+var STATIC_CAPABILITIES = [
+  "oauth",
+  // The oauth:* tags mirror GRANT_TYPES_SUPPORTED + the S256 PKCE method
+  // (schemas/oauth-endpoints.ts / the RFC 8414 discovery doc). Keep in sync.
+  "oauth:auth-code",
+  "oauth:device",
+  "oauth:pkce",
+  "pat",
+  "pages",
+  "comments",
+  "bookmarks",
+  "attachments",
+  "notifications"
+];
+var API_SURFACE_VERSION = "v2";
+
 // src/schemas/mail-token.ts
 import { z as z54 } from "@hono/zod-openapi";
 var MailTokenPurposeSchema = z54.enum(["invite", "activate", "reset", "email-change"]);
@@ -5930,6 +6191,7 @@ var MailTokenPayloadSchema = z54.object({
 });
 export {
   ALL_SCOPES,
+  API_SURFACE_VERSION,
   AccessTokenSchema,
   ActivateRequestSchema,
   ActivateValidationResponseSchema,
@@ -6040,6 +6302,7 @@ export {
   InviteUsersRequestSchema,
   InviteUsersResponseSchema,
   InvitedUserResultSchema,
+  KNOWN_HTML_ELEMENTS,
   LanguageSchema,
   LikerSchema,
   LikersResponseSchema,
@@ -6138,6 +6401,7 @@ export {
   RenameTreeErrorSchema,
   ResetPasswordRequestSchema,
   ResetPasswordResponseSchema,
+  RevertToRevisionRequestSchema,
   RevisionInvalidRequestErrorSchema,
   RevisionMetaSchema,
   RevisionMetaSchemaShape,
@@ -6146,6 +6410,8 @@ export {
   RevokeRequestSchema,
   RevokeResponseSchema,
   SCOPES,
+  STATIC_CAPABILITIES,
+  STRIP_KNOWN_HTML_TAGS_MAX_LENGTH,
   SearchAdminUsersByEmailRequestSchema,
   SearchAdminUsersByEmailResponseSchema,
   SearchDriverEntrySchema,
@@ -6326,8 +6592,10 @@ export {
   removeFromAdminRoute,
   renamePageRoute,
   renameSubtreeRoute,
+  resendInviteRoute,
   resetPasswordRoute,
   revertDeletedPageRoute,
+  revertToRevisionRoute,
   revisionRoutes,
   revokeRoute,
   scopeSatisfies,
@@ -6339,6 +6607,7 @@ export {
   sendTestMailRoute,
   setPageGrantRoute,
   setWatchStatusRoute,
+  stripKnownHtmlTags,
   suspendUserRoute,
   tokenAuthRoutes,
   tokenLoginRoute,