@crowi/api-contract 2.0.0-alpha.10 → 2.0.0-alpha.12

package/dist/index.js

@@ -23,6 +23,13 @@ __export(index_exports, {
   ALL_CAPABILITIES: () => ALL_CAPABILITIES,
   ALL_SCOPES: () => ALL_SCOPES,
   API_SURFACE_VERSION: () => API_SURFACE_VERSION,
+  AST_INPUT_LIMIT_BYTES: () => AST_INPUT_LIMIT_BYTES,
+  AST_MAX_HAST_DEPTH: () => AST_MAX_HAST_DEPTH,
+  AST_MAX_IMAGE_BASE64_CHARS: () => AST_MAX_IMAGE_BASE64_CHARS,
+  AST_MAX_TREE_DEPTH: () => AST_MAX_TREE_DEPTH,
+  AST_MAX_VALUE_CHARS: () => AST_MAX_VALUE_CHARS,
+  AST_OUTPUT_BUDGET_BYTES: () => AST_OUTPUT_BUDGET_BYTES,
+  AST_OUTPUT_WARN_BYTES: () => AST_OUTPUT_WARN_BYTES,
   AccessTokenSchema: () => AccessTokenSchema,
   ActivateRequestSchema: () => ActivateRequestSchema,
   ActivateValidationResponseSchema: () => ActivateValidationResponseSchema,
@@ -59,6 +66,7 @@ __export(index_exports, {
   BacklinkSchema: () => BacklinkSchema,
   BookmarkResponseSchema: () => BookmarkResponseSchema,
   BookmarkSchema: () => BookmarkSchema,
+  CURRENT_AST_VERSION: () => CURRENT_AST_VERSION,
   CapabilitySchema: () => CapabilitySchema,
   ClaimPageLinkAccessResponseSchema: () => ClaimPageLinkAccessResponseSchema,
   ClearRenderCacheResponseSchema: () => ClearRenderCacheResponseSchema,
@@ -81,10 +89,21 @@ __export(index_exports, {
   CreateDraftRequestSchema: () => CreateDraftRequestSchema,
   CreateDraftResponseSchema: () => CreateDraftResponseSchema,
   CreatePageRequestSchema: () => CreatePageRequestSchema,
+  CrowiCodeSidecarSchema: () => CrowiCodeSidecarSchema,
+  CrowiDiagramNodeSchema: () => CrowiDiagramNodeSchema,
+  CrowiDiagramSidecarSchema: () => CrowiDiagramSidecarSchema,
+  CrowiDimensionSchema: () => CrowiDimensionSchema,
+  CrowiImagePayloadSchema: () => CrowiImagePayloadSchema,
+  CrowiLinkCardNodeSchema: () => CrowiLinkCardNodeSchema,
+  CrowiLinkCardSidecarSchema: () => CrowiLinkCardSidecarSchema,
+  CrowiMathSidecarSchema: () => CrowiMathSidecarSchema,
+  CrowiOpaqueNodeSchema: () => CrowiOpaqueNodeSchema,
+  CrowiPlaceholderKindSchema: () => CrowiPlaceholderKindSchema,
+  CrowiPlaceholderNodeSchema: () => CrowiPlaceholderNodeSchema,
+  CrowiPlaceholderSidecarSchema: () => CrowiPlaceholderSidecarSchema,
   CryptoStatusResponseSchema: () => CryptoStatusResponseSchema,
   DEVICE_CODE_GRANT_TYPE: () => DEVICE_CODE_GRANT_TYPE,
   DISCOVERY_SCOPES_SUPPORTED: () => DISCOVERY_SCOPES_SUPPORTED,
-  DND_EXTRA_UPLOAD_MIME: () => DND_EXTRA_UPLOAD_MIME,
   DYNAMIC_CAPABILITIES: () => DYNAMIC_CAPABILITIES,
   DeleteAdminUserResponseSchema: () => DeleteAdminUserResponseSchema,
   DeleteCommentRequestSchema: () => DeleteCommentRequestSchema,
@@ -125,7 +144,11 @@ __export(index_exports, {
   GetSeenUsersRequestSchema: () => GetSeenUsersRequestSchema,
   GetStorageStatusResponseSchema: () => GetStorageStatusResponseSchema,
   GetWatchStatusRequestSchema: () => GetWatchStatusRequestSchema,
-  IMAGE_UPLOAD_MIME: () => IMAGE_UPLOAD_MIME,
+  HChildSchema: () => HChildSchema,
+  HChildrenSchema: () => HChildrenSchema,
+  HNameSchema: () => HNameSchema,
+  HPropertiesSchema: () => HPropertiesSchema,
+  HastHintDataSchema: () => HastHintDataSchema,
   ISSUABLE_SCOPES: () => ISSUABLE_SCOPES,
   InstallerStatusResponseSchema: () => InstallerStatusResponseSchema,
   InsufficientScopeErrorSchema: () => InsufficientScopeErrorSchema,
@@ -160,6 +183,7 @@ __export(index_exports, {
   ListRevisionsResponseSchema: () => ListRevisionsResponseSchema,
   ListUsersRequestSchema: () => ListUsersRequestSchema,
   ListUsersResponseSchema: () => ListUsersResponseSchema,
+  LooseRenderedAstRootSchema: () => LooseRenderedAstRootSchema,
   MailSettingsValidationErrorSchema: () => MailSettingsValidationErrorSchema,
   MailTokenPayloadSchema: () => MailTokenPayloadSchema,
   MailTokenPurposeSchema: () => MailTokenPurposeSchema,
@@ -211,6 +235,9 @@ __export(index_exports, {
   PluginFieldSchema: () => PluginFieldSchema,
   PluginInfoSchema: () => PluginInfoSchema,
   PluginNotFoundErrorSchema: () => PluginNotFoundErrorSchema,
+  PluginReadinessFieldSchema: () => PluginReadinessFieldSchema,
+  PluginReadinessIssueSchema: () => PluginReadinessIssueSchema,
+  PluginReadinessResponseSchema: () => PluginReadinessResponseSchema,
   PresenceClientMessageSchema: () => PresenceClientMessageSchema,
   PresenceCommentChangedMessageSchema: () => PresenceCommentChangedMessageSchema,
   PresenceHeartbeatMessageSchema: () => PresenceHeartbeatMessageSchema,
@@ -223,6 +250,7 @@ __export(index_exports, {
   PreviewPageRequestSchema: () => PreviewPageRequestSchema,
   PreviewPageResponseSchema: () => PreviewPageResponseSchema,
   ProfileErrorResponseSchema: () => ProfileErrorResponseSchema,
+  RENDERED_AST_NODE_DEFS: () => RENDERED_AST_NODE_DEFS,
   RecentlyViewedPagesResponseSchema: () => RecentlyViewedPagesResponseSchema,
   ReencryptResponseSchema: () => ReencryptResponseSchema,
   RefreshTokenRequestSchema: () => RefreshTokenRequestSchema,
@@ -236,6 +264,13 @@ __export(index_exports, {
   RenameSubtreeRequestSchema: () => RenameSubtreeRequestSchema,
   RenameSubtreeResponseSchema: () => RenameSubtreeResponseSchema,
   RenameTreeErrorSchema: () => RenameTreeErrorSchema,
+  RenderedAstArtifactKeySchema: () => RenderedAstArtifactKeySchema,
+  RenderedAstEnvelopeOpenApiSchema: () => RenderedAstEnvelopeOpenApiSchema,
+  RenderedAstEnvelopeSchema: () => RenderedAstEnvelopeSchema,
+  RenderedAstNodeSchema: () => RenderedAstNodeSchema,
+  RenderedAstRootSchema: () => RenderedAstRootSchema,
+  RenderedAstValueSchema: () => RenderedAstValueSchema,
+  ReservationSchema: () => ReservationSchema,
   ResetPasswordRequestSchema: () => ResetPasswordRequestSchema,
   ResetPasswordResponseSchema: () => ResetPasswordResponseSchema,
   RevertToRevisionRequestSchema: () => RevertToRevisionRequestSchema,
@@ -247,6 +282,7 @@ __export(index_exports, {
   RevokeRequestSchema: () => RevokeRequestSchema,
   RevokeResponseSchema: () => RevokeResponseSchema,
   SCOPES: () => SCOPES,
+  SIDECAR_KEYS: () => SIDECAR_KEYS,
   STATIC_CAPABILITIES: () => STATIC_CAPABILITIES,
   STRIP_KNOWN_HTML_TAGS_MAX_LENGTH: () => STRIP_KNOWN_HTML_TAGS_MAX_LENGTH,
   SearchAdminUsersByEmailRequestSchema: () => SearchAdminUsersByEmailRequestSchema,
@@ -266,6 +302,9 @@ __export(index_exports, {
   ServiceUnavailableErrorSchema: () => ServiceUnavailableErrorSchema,
   SetPageGrantRequestSchema: () => SetPageGrantRequestSchema,
   SetWatchStatusRequestSchema: () => SetWatchStatusRequestSchema,
+  ShikiTokenLinesSchema: () => ShikiTokenLinesSchema,
+  ShikiTokenSchema: () => ShikiTokenSchema,
+  ShikiTokenStyleSchema: () => ShikiTokenStyleSchema,
   StorageDriverEntrySchema: () => StorageDriverEntrySchema,
   SuccessResponseSchema: () => SuccessResponseSchema,
   ThemeSchema: () => ThemeSchema,
@@ -278,6 +317,7 @@ __export(index_exports, {
   TokenAuthResponseSchema: () => TokenAuthResponseSchema,
   TokenRequestSchema: () => TokenRequestSchema,
   TokenResponseSchema: () => TokenResponseSchema,
+  UPLOAD_ALLOWED_MIME: () => UPLOAD_ALLOWED_MIME,
   UpdateAdminUserEmailRequestSchema: () => UpdateAdminUserEmailRequestSchema,
   UpdateAppSettingsRequestSchema: () => UpdateAppSettingsRequestSchema,
   UpdateAppSettingsResponseSchema: () => UpdateAppSettingsResponseSchema,
@@ -309,6 +349,7 @@ __export(index_exports, {
   UserStatusErrorSchema: () => UserStatusErrorSchema,
   UserStatusSchema: () => UserStatusSchema,
   UserSubpagesRequestSchema: () => UserSubpagesRequestSchema,
+  UsernameSchema: () => UsernameSchema,
   ValidationErrorSchema: () => ValidationErrorSchema,
   WS_CLOSE_CODES: () => WS_CLOSE_CODES,
   WatchStatusResponseSchema: () => WatchStatusResponseSchema,
@@ -379,6 +420,7 @@ __export(index_exports, {
   getNotificationsTokenRoute: () => getNotificationsTokenRoute,
   getPageRoute: () => getPageRoute,
   getPluginConfigRoute: () => getPluginConfigRoute,
+  getPluginReadinessRoute: () => getPluginReadinessRoute,
   getPresenceTokenRoute: () => getPresenceTokenRoute,
   getProfileRoute: () => getProfileRoute,
   getRevisionRoute: () => getRevisionRoute,
@@ -459,6 +501,7 @@ __export(index_exports, {
   tokenRegisterRoute: () => tokenRegisterRoute,
   tokenRoute: () => tokenRoute,
   unlikePageRoute: () => unlikePageRoute,
+  unwrapRenderedAst: () => unwrapRenderedAst,
   updateAppSettingsRoute: () => updateAppSettingsRoute,
   updateAuthSettingsRoute: () => updateAuthSettingsRoute,
   updateMailSettingsRoute: () => updateMailSettingsRoute,
@@ -479,7 +522,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/client.ts
-var import_zod_openapi73 = require("@hono/zod-openapi");
+var import_zod_openapi75 = require("@hono/zod-openapi");
 var import_client = require("hono/client");
 
 // src/contracts/admin/app.ts
@@ -1129,6 +1172,18 @@ var ClearRenderCacheResponseSchema = import_zod_openapi9.z.object({
   /** Number of cache rows removed. */
   removedCount: import_zod_openapi9.z.number().int().min(0)
 });
+var PluginReadinessFieldSchema = import_zod_openapi9.z.object({
+  name: import_zod_openapi9.z.string(),
+  configured: import_zod_openapi9.z.literal(false)
+});
+var PluginReadinessIssueSchema = import_zod_openapi9.z.object({
+  name: import_zod_openapi9.z.string(),
+  adminPlacement: PluginAdminPlacementSchema,
+  fields: import_zod_openapi9.z.array(PluginReadinessFieldSchema)
+});
+var PluginReadinessResponseSchema = import_zod_openapi9.z.object({
+  issues: import_zod_openapi9.z.array(PluginReadinessIssueSchema)
+});
 
 // src/contracts/admin/plugins.ts
 var PluginNameQuerySchema = import_zod_openapi10.z.object({ name: import_zod_openapi10.z.string() });
@@ -1260,6 +1315,27 @@ var clearRenderCacheAllRoute = (0, import_zod_openapi10.createRoute)({
     }
   }
 });
+var getPluginReadinessRoute = (0, import_zod_openapi10.createRoute)({
+  method: "get",
+  path: "/admin/plugins/readiness",
+  tags: ["admin.plugins"],
+  security: [{ bearerAuth: [] }],
+  summary: "List active plugins missing required readiness config fields",
+  responses: {
+    200: {
+      description: "Readiness issues for active plugins (empty when everything is configured)",
+      content: { "application/json": { schema: PluginReadinessResponseSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    403: {
+      description: "Admin permission required",
+      content: { "application/json": { schema: AdminRequiredErrorSchema } }
+    }
+  }
+});
 var clearRenderCachePluginRoute = (0, import_zod_openapi10.createRoute)({
   method: "post",
   path: "/admin/plugins/render-cache/clear-plugin",
@@ -1299,6 +1375,7 @@ var adminPluginsRoutes = {
   listPluginsRoute,
   getPluginConfigRoute,
   updatePluginConfigRoute,
+  getPluginReadinessRoute,
   clearRenderCacheAllRoute,
   clearRenderCachePluginRoute
 };
@@ -2202,14 +2279,51 @@ var UploadAttachmentResponseSchema = import_zod_openapi24.z.object({
   mimeType: import_zod_openapi24.z.string(),
   sizeBytes: import_zod_openapi24.z.number()
 });
-var UploadAttachmentErrorCodeSchema = import_zod_openapi24.z.enum(["too_large", "disallowed_type", "rate_limited", "no_permission"]);
+var UploadAttachmentErrorCodeSchema = import_zod_openapi24.z.enum(["too_large", "disallowed_type", "DISALLOWED_MIME", "rate_limited", "no_permission"]);
 var UploadAttachmentErrorSchema = import_zod_openapi24.z.object({
   error: UploadAttachmentErrorCodeSchema,
   message: import_zod_openapi24.z.string(),
   details: import_zod_openapi24.z.record(import_zod_openapi24.z.string(), import_zod_openapi24.z.unknown()).optional()
 });
-var IMAGE_UPLOAD_MIME = ["image/png", "image/jpeg", "image/gif", "image/webp", "image/svg+xml"];
-var DND_EXTRA_UPLOAD_MIME = ["application/pdf", "text/plain", "text/markdown", "text/csv", "application/zip"];
+var UPLOAD_ALLOWED_MIME = [
+  // Raster + vector images.
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "image/svg+xml",
+  "image/bmp",
+  "image/avif",
+  "image/apng",
+  "image/x-icon",
+  // Documents / text.
+  "application/pdf",
+  "text/plain",
+  "text/markdown",
+  "text/csv",
+  "application/json",
+  "application/xml",
+  "text/html",
+  // Office documents.
+  "application/msword",
+  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  "application/vnd.ms-excel",
+  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+  "application/vnd.ms-powerpoint",
+  "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+  // Archives.
+  "application/zip",
+  "application/gzip",
+  "application/x-tar",
+  // Audio / video.
+  "audio/mpeg",
+  "audio/wav",
+  "video/mp4",
+  "video/webm",
+  "video/quicktime",
+  // Unknown / unset — see the note above.
+  "application/octet-stream"
+];
 
 // src/contracts/attachment.ts
 var PageIdPathParamsSchema = import_zod_openapi25.z.object({
@@ -2291,6 +2405,10 @@ var addAttachmentRoute = (0, import_zod_openapi25.createRoute)({
       description: "Request body exceeds the multipart envelope ceiling",
       content: { "application/json": { schema: AttachmentErrorSchema } }
     },
+    415: {
+      description: "MIME type not in the unified upload allow-list (feature-attachment-upload-policy)",
+      content: { "application/json": { schema: AttachmentErrorSchema } }
+    },
     500: {
       description: "Upload / storage failure",
       content: { "application/json": { schema: AttachmentErrorSchema } }
@@ -2394,7 +2512,7 @@ var uploadAttachmentRoute = (0, import_zod_openapi25.createRoute)({
       content: { "application/json": { schema: UploadAttachmentErrorSchema } }
     },
     415: {
-      description: "MIME type not in the per-intent allow-list",
+      description: "MIME type not in the unified upload allow-list (feature-attachment-upload-policy)",
       content: { "application/json": { schema: UploadAttachmentErrorSchema } }
     },
     429: {
@@ -2555,7 +2673,7 @@ var autocompleteRoutes = {
 };
 
 // src/contracts/backlink.ts
-var import_zod_openapi31 = require("@hono/zod-openapi");
+var import_zod_openapi32 = require("@hono/zod-openapi");
 
 // src/schemas/backlink.ts
 var import_zod_openapi28 = require("@hono/zod-openapi");
@@ -2589,7 +2707,7 @@ var GetBacklinksResponseSchema = import_zod_openapi28.z.object({
 });
 
 // src/schemas/page.ts
-var import_zod_openapi30 = require("@hono/zod-openapi");
+var import_zod_openapi31 = require("@hono/zod-openapi");
 
 // src/schemas/collab.ts
 var import_zod_openapi29 = require("@hono/zod-openapi");
@@ -2627,15 +2745,341 @@ var CollabForceReloadMessageSchema = import_zod_openapi29.z.object({
   reason: import_zod_openapi29.z.string().optional()
 });
 
+// src/schemas/rendered-ast.ts
+var import_zod_openapi30 = require("@hono/zod-openapi");
+var CURRENT_AST_VERSION = 1;
+var AST_INPUT_LIMIT_BYTES = 8 * 1024 * 1024;
+var AST_OUTPUT_WARN_BYTES = 512 * 1024;
+var AST_OUTPUT_BUDGET_BYTES = 2 * 1024 * 1024;
+var AST_MAX_TREE_DEPTH = 64;
+var AST_MAX_HAST_DEPTH = 16;
+var AST_MAX_IMAGE_BASE64_CHARS = 14e4;
+var AST_MAX_VALUE_CHARS = 2e5;
+var HPropertyValueSchema = import_zod_openapi30.z.union([
+  import_zod_openapi30.z.string().max(4096),
+  import_zod_openapi30.z.number(),
+  import_zod_openapi30.z.boolean(),
+  import_zod_openapi30.z.array(import_zod_openapi30.z.union([import_zod_openapi30.z.string().max(4096), import_zod_openapi30.z.number()])).max(64)
+  // className etc.
+]);
+var HPropertiesSchema = import_zod_openapi30.z.object({
+  id: import_zod_openapi30.z.string().max(256).optional(),
+  className: import_zod_openapi30.z.union([import_zod_openapi30.z.string().max(4096), import_zod_openapi30.z.array(import_zod_openapi30.z.string().max(256)).max(64)]).optional(),
+  role: import_zod_openapi30.z.string().max(64).optional(),
+  ariaLabel: import_zod_openapi30.z.string().max(256).optional(),
+  "data-source-line": import_zod_openapi30.z.union([import_zod_openapi30.z.string().max(32), import_zod_openapi30.z.number()]).optional(),
+  "data-crowi-image-align": import_zod_openapi30.z.string().max(16).optional(),
+  "data-crowi-image-float": import_zod_openapi30.z.string().max(16).optional(),
+  "data-crowi-image-width": import_zod_openapi30.z.string().max(16).optional(),
+  "data-crowi-image-height": import_zod_openapi30.z.string().max(16).optional()
+}).catchall(HPropertyValueSchema);
+var HChildSchema = import_zod_openapi30.z.lazy(
+  () => import_zod_openapi30.z.discriminatedUnion("type", [
+    import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("raw"), value: import_zod_openapi30.z.string().max(AST_MAX_VALUE_CHARS) }),
+    import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("text"), value: import_zod_openapi30.z.string().max(AST_MAX_VALUE_CHARS) }),
+    import_zod_openapi30.z.object({
+      type: import_zod_openapi30.z.literal("element"),
+      tagName: import_zod_openapi30.z.string().max(32).regex(/^[a-zA-Z][a-zA-Z0-9-]*$/),
+      properties: HPropertiesSchema.optional(),
+      children: import_zod_openapi30.z.array(HChildSchema)
+    })
+  ])
+);
+var HChildrenSchema = import_zod_openapi30.z.array(HChildSchema).max(256);
+var HNameSchema = import_zod_openapi30.z.string().max(32).regex(/^[a-zA-Z][a-zA-Z0-9-]*$/);
+var HastHintDataSchema = import_zod_openapi30.z.object({
+  hName: HNameSchema.optional(),
+  hProperties: HPropertiesSchema.optional(),
+  hChildren: HChildrenSchema.optional()
+});
+var CrowiDimensionSchema = import_zod_openapi30.z.number().int().min(1).max(16384);
+var CrowiImagePayloadSchema = import_zod_openapi30.z.object({
+  mediaType: import_zod_openapi30.z.enum(["image/svg+xml", "image/png"]),
+  base64: import_zod_openapi30.z.string().max(AST_MAX_IMAGE_BASE64_CHARS),
+  /** Intrinsic dimensions — required (parent spec §3). Producers that cannot derive them fall back to html-only. */
+  width: CrowiDimensionSchema,
+  height: CrowiDimensionSchema
+});
+var ShikiTokenStyleSchema = import_zod_openapi30.z.object({
+  color: import_zod_openapi30.z.string().max(32),
+  bgColor: import_zod_openapi30.z.string().max(32).optional(),
+  fontStyle: import_zod_openapi30.z.array(import_zod_openapi30.z.enum(["italic", "bold", "underline", "strikethrough"])).max(4).optional()
+});
+var ShikiTokenSchema = import_zod_openapi30.z.object({
+  content: import_zod_openapi30.z.string().max(4096),
+  light: ShikiTokenStyleSchema,
+  dark: ShikiTokenStyleSchema
+});
+var ShikiTokenLinesSchema = import_zod_openapi30.z.array(import_zod_openapi30.z.array(ShikiTokenSchema)).max(2e4);
+var CrowiCodeSidecarSchema = import_zod_openapi30.z.object({
+  lang: import_zod_openapi30.z.string().max(64).optional(),
+  value: import_zod_openapi30.z.string().max(AST_MAX_VALUE_CHARS),
+  /** Lines of themed tokens (light/dark both, `defaultColor: false`). */
+  tokens: ShikiTokenLinesSchema
+});
+var CrowiMathSidecarSchema = import_zod_openapi30.z.object({
+  tex: import_zod_openapi30.z.string().max(AST_MAX_VALUE_CHARS),
+  display: import_zod_openapi30.z.boolean()
+});
+var CrowiDiagramSidecarSchema = import_zod_openapi30.z.object({
+  kind: import_zod_openapi30.z.enum(["mermaid", "plantuml"]),
+  /** Mermaid's closed-enum diagram-type keyword (flowchart / sequence / ...). */
+  diagramType: import_zod_openapi30.z.string().max(32).optional(),
+  alt: import_zod_openapi30.z.string().max(256),
+  image: CrowiImagePayloadSchema
+});
+var CrowiLinkCardSidecarSchema = import_zod_openapi30.z.object({
+  url: import_zod_openapi30.z.string().max(4096),
+  title: import_zod_openapi30.z.string().max(512).optional(),
+  description: import_zod_openapi30.z.string().max(2048).optional(),
+  /** OGP image stays an external URL (never inlined server-side — parent spec §10). */
+  image: import_zod_openapi30.z.object({ url: import_zod_openapi30.z.string().max(4096) }).optional(),
+  siteName: import_zod_openapi30.z.string().max(256).optional(),
+  domain: import_zod_openapi30.z.string().max(256).optional()
+});
+var CrowiPlaceholderKindSchema = import_zod_openapi30.z.enum([
+  "error-auth",
+  "error-rate-limit",
+  "error-not-found",
+  "error-network",
+  "error-timeout",
+  "error-unknown",
+  "error-blocked",
+  "error-busy",
+  "size-limit-entry",
+  "size-limit-page",
+  "dispatch-limit",
+  "validation-failed",
+  "envelope-invalid"
+]);
+var ReservationSchema = import_zod_openapi30.z.discriminatedUnion("variant", [
+  import_zod_openapi30.z.object({ variant: import_zod_openapi30.z.literal("fixed"), widthPx: import_zod_openapi30.z.number().optional(), heightPx: import_zod_openapi30.z.number() }),
+  import_zod_openapi30.z.object({ variant: import_zod_openapi30.z.literal("aspect"), aspectRatio: import_zod_openapi30.z.number() }),
+  import_zod_openapi30.z.object({ variant: import_zod_openapi30.z.literal("card"), size: import_zod_openapi30.z.enum(["small", "medium", "large"]) })
+]);
+var CrowiPlaceholderSidecarSchema = import_zod_openapi30.z.object({
+  kind: CrowiPlaceholderKindSchema,
+  label: import_zod_openapi30.z.string().max(512),
+  reservation: ReservationSchema
+});
+var SIDECAR_KEYS = ["crowiCode", "crowiMath", "crowiDiagram", "crowiLinkCard", "crowiPlaceholder"];
+var noFields = import_zod_openapi30.z.object({});
+var headingFields = import_zod_openapi30.z.object({ depth: import_zod_openapi30.z.number().int().min(1).max(6) });
+var valueFields = import_zod_openapi30.z.object({ value: import_zod_openapi30.z.string().max(AST_MAX_VALUE_CHARS) });
+var codeFields = import_zod_openapi30.z.object({
+  value: import_zod_openapi30.z.string().max(AST_MAX_VALUE_CHARS),
+  lang: import_zod_openapi30.z.string().max(64).nullable().optional(),
+  meta: import_zod_openapi30.z.string().max(1024).nullable().optional()
+});
+var mathFields = import_zod_openapi30.z.object({
+  value: import_zod_openapi30.z.string().max(AST_MAX_VALUE_CHARS),
+  meta: import_zod_openapi30.z.string().max(1024).nullable().optional()
+});
+var listFields = import_zod_openapi30.z.object({
+  ordered: import_zod_openapi30.z.boolean().nullable().optional(),
+  start: import_zod_openapi30.z.number().int().nullable().optional(),
+  spread: import_zod_openapi30.z.boolean().nullable().optional()
+});
+var listItemFields = import_zod_openapi30.z.object({
+  checked: import_zod_openapi30.z.boolean().nullable().optional(),
+  spread: import_zod_openapi30.z.boolean().nullable().optional()
+});
+var linkFields = import_zod_openapi30.z.object({
+  url: import_zod_openapi30.z.string().max(4096),
+  title: import_zod_openapi30.z.string().max(512).nullable().optional()
+});
+var imageFields = import_zod_openapi30.z.object({
+  url: import_zod_openapi30.z.string().max(4096),
+  alt: import_zod_openapi30.z.string().max(1024).nullable().optional(),
+  title: import_zod_openapi30.z.string().max(512).nullable().optional()
+});
+var tableFields = import_zod_openapi30.z.object({
+  align: import_zod_openapi30.z.array(import_zod_openapi30.z.enum(["left", "right", "center"]).nullable()).max(256).nullable().optional()
+});
+var definitionFields = import_zod_openapi30.z.object({
+  identifier: import_zod_openapi30.z.string().max(256),
+  url: import_zod_openapi30.z.string().max(4096),
+  label: import_zod_openapi30.z.string().max(256).optional(),
+  title: import_zod_openapi30.z.string().max(512).nullable().optional()
+});
+var footnoteDefinitionFields = import_zod_openapi30.z.object({
+  identifier: import_zod_openapi30.z.string().max(256),
+  label: import_zod_openapi30.z.string().max(256).optional()
+});
+var footnoteReferenceFields = footnoteDefinitionFields;
+var referenceTypeSchema = import_zod_openapi30.z.enum(["shortcut", "collapsed", "full"]);
+var linkReferenceFields = import_zod_openapi30.z.object({
+  identifier: import_zod_openapi30.z.string().max(256),
+  referenceType: referenceTypeSchema,
+  label: import_zod_openapi30.z.string().max(256).optional()
+});
+var imageReferenceFields = import_zod_openapi30.z.object({
+  identifier: import_zod_openapi30.z.string().max(256),
+  referenceType: referenceTypeSchema,
+  label: import_zod_openapi30.z.string().max(256).optional(),
+  alt: import_zod_openapi30.z.string().max(1024).nullable().optional()
+});
+var crowiOpaqueFields = import_zod_openapi30.z.object({
+  reason: import_zod_openapi30.z.enum(["unknown-type", "invalid-shape", "invalid-position"]),
+  /** Best-effort diagnostics only — never a rendering hint. Truncated to 64 chars before assignment. */
+  originalType: import_zod_openapi30.z.string().max(64).optional()
+});
+var RENDERED_AST_NODE_DEFS = {
+  root: { placement: "flow", childModel: "flow", fields: noFields },
+  paragraph: { placement: "flow", childModel: "phrasing", fields: noFields },
+  heading: { placement: "flow", childModel: "phrasing", fields: headingFields },
+  thematicBreak: { placement: "flow", childModel: "none", fields: noFields },
+  blockquote: { placement: "flow", childModel: "flow", fields: noFields },
+  list: { placement: "flow", childModel: "listItems", fields: listFields },
+  listItem: { placement: "listItems", childModel: "flow", fields: listItemFields },
+  html: { placement: "both", childModel: "none", fields: valueFields },
+  code: { placement: "flow", childModel: "none", fields: codeFields },
+  inlineCode: { placement: "phrasing", childModel: "none", fields: valueFields },
+  math: { placement: "flow", childModel: "none", fields: mathFields },
+  inlineMath: { placement: "phrasing", childModel: "none", fields: mathFields },
+  text: { placement: "phrasing", childModel: "none", fields: valueFields },
+  strong: { placement: "phrasing", childModel: "phrasing", fields: noFields },
+  emphasis: { placement: "phrasing", childModel: "phrasing", fields: noFields },
+  delete: { placement: "phrasing", childModel: "phrasing", fields: noFields },
+  break: { placement: "phrasing", childModel: "none", fields: noFields },
+  link: { placement: "phrasing", childModel: "phrasing", fields: linkFields },
+  image: { placement: "phrasing", childModel: "none", fields: imageFields },
+  table: { placement: "flow", childModel: "tableRows", fields: tableFields },
+  tableRow: { placement: "tableRows", childModel: "tableCells", fields: noFields },
+  tableCell: { placement: "tableCells", childModel: "phrasing", fields: noFields },
+  definition: { placement: "flow", childModel: "none", fields: definitionFields },
+  footnoteDefinition: { placement: "flow", childModel: "flow", fields: footnoteDefinitionFields },
+  footnoteReference: { placement: "phrasing", childModel: "none", fields: footnoteReferenceFields },
+  linkReference: { placement: "phrasing", childModel: "phrasing", fields: linkReferenceFields },
+  imageReference: { placement: "phrasing", childModel: "none", fields: imageReferenceFields },
+  // Crowi-owned types. `crowiFigure` is the only one that also appears
+  // in stored ASTs; the other three only exist as projection outputs
+  // (or as defensively-validated plugin-injected nodes).
+  crowiFigure: { placement: "flow", childModel: "phrasing", fields: noFields },
+  crowiDiagram: { placement: "flow", childModel: "none", fields: CrowiDiagramSidecarSchema },
+  crowiLinkCard: { placement: "flow", childModel: "none", fields: CrowiLinkCardSidecarSchema },
+  crowiPlaceholder: { placement: "both", childModel: "none", fields: CrowiPlaceholderSidecarSchema },
+  crowiOpaque: { placement: "both", childModel: "none", fields: crowiOpaqueFields }
+};
+var RenderedAstNodeSchema = import_zod_openapi30.z.lazy(
+  () => import_zod_openapi30.z.discriminatedUnion("type", [
+    RootNodeSchema,
+    ParagraphNodeSchema,
+    HeadingNodeSchema,
+    ThematicBreakNodeSchema,
+    BlockquoteNodeSchema,
+    ListNodeSchema,
+    ListItemNodeSchema,
+    HtmlNodeSchema,
+    CodeNodeSchema,
+    InlineCodeNodeSchema,
+    MathNodeSchema,
+    InlineMathNodeSchema,
+    TextNodeSchema,
+    StrongNodeSchema,
+    EmphasisNodeSchema,
+    DeleteNodeSchema,
+    BreakNodeSchema,
+    LinkNodeSchema,
+    ImageNodeSchema,
+    TableNodeSchema,
+    TableRowNodeSchema,
+    TableCellNodeSchema,
+    DefinitionNodeSchema,
+    FootnoteDefinitionNodeSchema,
+    FootnoteReferenceNodeSchema,
+    LinkReferenceNodeSchema,
+    ImageReferenceNodeSchema,
+    CrowiFigureNodeSchema,
+    CrowiDiagramNodeSchema,
+    CrowiLinkCardNodeSchema,
+    CrowiPlaceholderNodeSchema,
+    CrowiOpaqueNodeSchema
+  ])
+);
+var childrenSchema = import_zod_openapi30.z.array(RenderedAstNodeSchema);
+var dataSchema = HastHintDataSchema.optional();
+var RootNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("root"), data: dataSchema, children: childrenSchema });
+var ParagraphNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("paragraph"), data: dataSchema, children: childrenSchema });
+var HeadingNodeSchema = headingFields.extend({ type: import_zod_openapi30.z.literal("heading"), data: dataSchema, children: childrenSchema });
+var ThematicBreakNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("thematicBreak"), data: dataSchema });
+var BlockquoteNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("blockquote"), data: dataSchema, children: childrenSchema });
+var ListNodeSchema = listFields.extend({ type: import_zod_openapi30.z.literal("list"), data: dataSchema, children: childrenSchema });
+var ListItemNodeSchema = listItemFields.extend({ type: import_zod_openapi30.z.literal("listItem"), data: dataSchema, children: childrenSchema });
+var HtmlNodeSchema = valueFields.extend({ type: import_zod_openapi30.z.literal("html"), data: dataSchema });
+var CodeDataSchema = HastHintDataSchema.extend({
+  renderPending: import_zod_openapi30.z.boolean().optional(),
+  tokens: ShikiTokenLinesSchema.optional()
+}).optional();
+var CodeNodeSchema = codeFields.extend({ type: import_zod_openapi30.z.literal("code"), data: CodeDataSchema });
+var InlineCodeNodeSchema = valueFields.extend({ type: import_zod_openapi30.z.literal("inlineCode"), data: dataSchema });
+var MathNodeSchema = mathFields.extend({ type: import_zod_openapi30.z.literal("math"), data: dataSchema });
+var InlineMathNodeSchema = mathFields.extend({ type: import_zod_openapi30.z.literal("inlineMath"), data: dataSchema });
+var TextNodeSchema = valueFields.extend({ type: import_zod_openapi30.z.literal("text"), data: dataSchema });
+var StrongNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("strong"), data: dataSchema, children: childrenSchema });
+var EmphasisNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("emphasis"), data: dataSchema, children: childrenSchema });
+var DeleteNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("delete"), data: dataSchema, children: childrenSchema });
+var BreakNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("break"), data: dataSchema });
+var LinkNodeSchema = linkFields.extend({ type: import_zod_openapi30.z.literal("link"), data: dataSchema, children: childrenSchema });
+var ImageNodeSchema = imageFields.extend({ type: import_zod_openapi30.z.literal("image"), data: dataSchema });
+var TableNodeSchema = tableFields.extend({ type: import_zod_openapi30.z.literal("table"), data: dataSchema, children: childrenSchema });
+var TableRowNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("tableRow"), data: dataSchema, children: childrenSchema });
+var TableCellNodeSchema = import_zod_openapi30.z.object({ type: import_zod_openapi30.z.literal("tableCell"), data: dataSchema, children: childrenSchema });
+var DefinitionNodeSchema = definitionFields.extend({ type: import_zod_openapi30.z.literal("definition"), data: dataSchema });
+var FootnoteDefinitionNodeSchema = footnoteDefinitionFields.extend({
+  type: import_zod_openapi30.z.literal("footnoteDefinition"),
+  data: dataSchema,
+  children: childrenSchema
+});
+var FootnoteReferenceNodeSchema = footnoteReferenceFields.extend({ type: import_zod_openapi30.z.literal("footnoteReference"), data: dataSchema });
+var LinkReferenceNodeSchema = linkReferenceFields.extend({ type: import_zod_openapi30.z.literal("linkReference"), data: dataSchema, children: childrenSchema });
+var ImageReferenceNodeSchema = imageReferenceFields.extend({ type: import_zod_openapi30.z.literal("imageReference"), data: dataSchema });
+var CrowiFigureNodeSchema = import_zod_openapi30.z.object({
+  type: import_zod_openapi30.z.literal("crowiFigure"),
+  data: HastHintDataSchema.extend({ hName: import_zod_openapi30.z.literal("figure"), hProperties: HPropertiesSchema }),
+  children: childrenSchema
+});
+var CrowiDiagramNodeSchema = CrowiDiagramSidecarSchema.extend({ type: import_zod_openapi30.z.literal("crowiDiagram"), data: dataSchema });
+var CrowiLinkCardNodeSchema = CrowiLinkCardSidecarSchema.extend({ type: import_zod_openapi30.z.literal("crowiLinkCard"), data: dataSchema });
+var CrowiPlaceholderNodeSchema = CrowiPlaceholderSidecarSchema.extend({ type: import_zod_openapi30.z.literal("crowiPlaceholder"), data: dataSchema });
+var CrowiOpaqueNodeSchema = crowiOpaqueFields.extend({ type: import_zod_openapi30.z.literal("crowiOpaque"), data: dataSchema });
+var RenderedAstRootSchema = RootNodeSchema;
+var RenderedAstEnvelopeSchema = import_zod_openapi30.z.object({
+  astVersion: import_zod_openapi30.z.literal(CURRENT_AST_VERSION),
+  root: RenderedAstRootSchema
+});
+var RenderedAstEnvelopeOpenApiSchema = import_zod_openapi30.z.object({
+  astVersion: import_zod_openapi30.z.literal(CURRENT_AST_VERSION),
+  root: import_zod_openapi30.z.unknown()
+}).openapi("RenderedAstEnvelope");
+var LooseRenderedAstRootSchema = import_zod_openapi30.z.object({
+  type: import_zod_openapi30.z.literal("root"),
+  children: import_zod_openapi30.z.array(import_zod_openapi30.z.unknown())
+}).openapi("LegacyRenderedAstRoot");
+var RenderedAstValueSchema = import_zod_openapi30.z.union([RenderedAstEnvelopeOpenApiSchema, LooseRenderedAstRootSchema]);
+var RenderedAstArtifactKeySchema = import_zod_openapi30.z.string().max(64);
+function unwrapRenderedAst(value) {
+  if (value === void 0 || value === null) return void 0;
+  if (typeof value !== "object") return void 0;
+  if (value.astVersion === CURRENT_AST_VERSION) {
+    const root = value.root;
+    return root === null ? void 0 : root;
+  }
+  if (value.type === "root" && Array.isArray(value.children)) {
+    return value;
+  }
+  return void 0;
+}
+
 // src/schemas/page.ts
-var PageGrantSchema = import_zod_openapi30.z.enum(["1", "2", "3", "4"]).transform((val) => Number(val));
+var PageGrantSchema = import_zod_openapi31.z.enum(["1", "2", "3", "4"]).transform((val) => Number(val));
 var PageGrantEnum = {
   PUBLIC: 1,
   RESTRICTED: 2,
   SPECIFIED: 3,
   OWNER: 4
 };
-var PageStatusSchema = import_zod_openapi30.z.enum(["wip", "published", "deleted", "deprecated", "draft"]);
+var PageStatusSchema = import_zod_openapi31.z.enum(["wip", "published", "deleted", "deprecated", "draft"]);
 var PageStatusEnum = {
   WIP: "wip",
   PUBLISHED: "published",
@@ -2643,43 +3087,43 @@ var PageStatusEnum = {
   DEPRECATED: "deprecated",
   DRAFT: "draft"
 };
-var PageTypeSchema = import_zod_openapi30.z.enum(["portal", "user", "public"]);
+var PageTypeSchema = import_zod_openapi31.z.enum(["portal", "user", "public"]);
 var PageTypeEnum = {
   PORTAL: "portal",
   USER: "user",
   PUBLIC: "public"
 };
-var PageUserSchema = import_zod_openapi30.z.object({
-  _id: import_zod_openapi30.z.string(),
-  id: import_zod_openapi30.z.string().optional(),
+var PageUserSchema = import_zod_openapi31.z.object({
+  _id: import_zod_openapi31.z.string(),
+  id: import_zod_openapi31.z.string().optional(),
   // for compatibility
-  username: import_zod_openapi30.z.string(),
-  name: import_zod_openapi30.z.string(),
-  email: import_zod_openapi30.z.string().email(),
-  image: import_zod_openapi30.z.string().nullable().optional(),
-  createdAt: import_zod_openapi30.z.string()
-});
-var TocEntrySchema = import_zod_openapi30.z.object({
-  level: import_zod_openapi30.z.number().int().min(1).max(6),
-  text: import_zod_openapi30.z.string(),
-  anchorId: import_zod_openapi30.z.string()
-});
-var WikiLinkSchema = import_zod_openapi30.z.object({
+  username: import_zod_openapi31.z.string(),
+  name: import_zod_openapi31.z.string(),
+  email: import_zod_openapi31.z.string().email(),
+  image: import_zod_openapi31.z.string().nullable().optional(),
+  createdAt: import_zod_openapi31.z.string()
+});
+var TocEntrySchema = import_zod_openapi31.z.object({
+  level: import_zod_openapi31.z.number().int().min(1).max(6),
+  text: import_zod_openapi31.z.string(),
+  anchorId: import_zod_openapi31.z.string()
+});
+var WikiLinkSchema = import_zod_openapi31.z.object({
   /** Verbatim source between the `[[` `]]` (no surrounding brackets). */
-  raw: import_zod_openapi30.z.string(),
+  raw: import_zod_openapi31.z.string(),
   /** Normalised target (left of the `|`, fragment trimmed for resolution). */
-  target: import_zod_openapi30.z.string(),
+  target: import_zod_openapi31.z.string(),
   /** Optional pipe-aliased display text (right of the `|`). */
-  displayText: import_zod_openapi30.z.string().optional()
+  displayText: import_zod_openapi31.z.string().optional()
 });
-var MentionSchema = import_zod_openapi30.z.object({
-  username: import_zod_openapi30.z.string()
+var MentionSchema = import_zod_openapi31.z.object({
+  username: import_zod_openapi31.z.string()
 });
-var RevisionMetaSchemaShape = import_zod_openapi30.z.object({
-  toc: import_zod_openapi30.z.array(TocEntrySchema).optional(),
-  wikiLinks: import_zod_openapi30.z.array(WikiLinkSchema).optional(),
-  mentions: import_zod_openapi30.z.array(MentionSchema).optional(),
-  codeBlockLanguages: import_zod_openapi30.z.array(import_zod_openapi30.z.string()).optional(),
+var RevisionMetaSchemaShape = import_zod_openapi31.z.object({
+  toc: import_zod_openapi31.z.array(TocEntrySchema).optional(),
+  wikiLinks: import_zod_openapi31.z.array(WikiLinkSchema).optional(),
+  mentions: import_zod_openapi31.z.array(MentionSchema).optional(),
+  codeBlockLanguages: import_zod_openapi31.z.array(import_zod_openapi31.z.string()).optional(),
   // feature-backlink-raw-space-metadata: raw destinations recovered by
   // `renderer/core/raw-space-links.ts` (`[label](/a b)` — a raw-space
   // absolute path CommonMark itself rejects as a link). Verbatim, NOT
@@ -2687,58 +3131,66 @@ var RevisionMetaSchemaShape = import_zod_openapi30.z.object({
   // `stripFragmentAndQuery` -> `decodeLinkPath` pipeline the regex-based
   // extraction path uses. Mirrors `wikiLinks` above: pushed by the core
   // transform into `PipelineMetadata`, persisted verbatim on `revision.meta`.
-  rawSpaceLinks: import_zod_openapi30.z.array(import_zod_openapi30.z.string()).optional()
+  rawSpaceLinks: import_zod_openapi31.z.array(import_zod_openapi31.z.string()).optional()
 });
-var RevisionSchema = import_zod_openapi30.z.object({
-  _id: import_zod_openapi30.z.string(),
-  path: import_zod_openapi30.z.string(),
-  body: import_zod_openapi30.z.string(),
-  format: import_zod_openapi30.z.string().default("markdown"),
+var RevisionSchema = import_zod_openapi31.z.object({
+  _id: import_zod_openapi31.z.string(),
+  path: import_zod_openapi31.z.string(),
+  body: import_zod_openapi31.z.string(),
+  format: import_zod_openapi31.z.string().default("markdown"),
   author: PageUserSchema.nullable().optional(),
-  createdAt: import_zod_openapi30.z.string(),
+  createdAt: import_zod_openapi31.z.string(),
   meta: RevisionMetaSchemaShape.optional(),
-  // RFC-0002 Phase 3: transformed mdast (parse + core plugins +
-  // shiki) for the web client to render without re-parsing the body.
-  // Typed as opaque `unknown` because mdast is too deep / external-
-  // spec to maintain a strict Zod schema for. Only single-page detail
-  // (`getPage`) and single-revision detail (`getRevision`) emit it;
-  // list endpoints skip it for payload weight.
-  renderedAst: import_zod_openapi30.z.unknown().optional(),
+  // RFC-0002 Phase 3 / RFC-0023: transformed mdast. Requests that
+  // declare `X-Crowi-Ast-Version: 1` receive the typed envelope
+  // (`{astVersion, root}`); everyone else (including the web,
+  // permanently) receives the stored bare mdast `Root` verbatim and
+  // unvalidated — see `schemas/rendered-ast.ts` for the full contract.
+  // Only single-page detail (`getPage`), the listPages portal document
+  // and single-revision detail (`getRevision`) emit it; list rows skip
+  // it for payload weight.
+  renderedAst: RenderedAstValueSchema.optional(),
+  // RFC-0023 (design doc §14): identity of the served AST artifact —
+  // `rendererVersion` for a verbatim stored AST, a per-response nonce
+  // when the served tree differs from the stored one (pending-marker
+  // retry / freshness-mismatch recompute). The web render memo keys on
+  // `[revisionId, renderedAstArtifactKey]`.
+  renderedAstArtifactKey: RenderedAstArtifactKeySchema.optional(),
   // RFC-0002 round 3.1: semver of the renderer pipeline that produced
   // `renderedAst`. The read path uses this to detect stale entries
   // (rebuilt by `renderer:rebuild` once RFC-0008 lands). Absent on
   // revisions saved before this field was introduced.
-  rendererVersion: import_zod_openapi30.z.string().optional(),
+  rendererVersion: import_zod_openapi31.z.string().optional(),
   // RFC-0003 collaborative-save fields. All optional; v1.x revisions
   // emit none of them. See `packages/api/src/models/revision.ts` for
   // semantics. The list-page endpoint currently does not surface
   // these — they only appear on the Phase 5+ checkpoint Revisions
   // produced by Hocuspocus and on the single-revision detail route.
-  parentRevisionId: import_zod_openapi30.z.string().nullable().optional(),
+  parentRevisionId: import_zod_openapi31.z.string().nullable().optional(),
   type: RevisionTypeSchema.optional(),
-  savedBy: import_zod_openapi30.z.union([import_zod_openapi30.z.string(), PageUserSchema]).nullable().optional(),
-  contributors: import_zod_openapi30.z.array(import_zod_openapi30.z.union([import_zod_openapi30.z.string(), PageUserSchema])).optional(),
-  message: import_zod_openapi30.z.string().optional(),
+  savedBy: import_zod_openapi31.z.union([import_zod_openapi31.z.string(), PageUserSchema]).nullable().optional(),
+  contributors: import_zod_openapi31.z.array(import_zod_openapi31.z.union([import_zod_openapi31.z.string(), PageUserSchema])).optional(),
+  message: import_zod_openapi31.z.string().optional(),
   // RFC-0010 — edit channel ('web' | 'oauth' | 'pat'); absent on
   // pre-RFC-0010 / collaborative / browser revisions.
-  editVia: import_zod_openapi30.z.enum(["web", "oauth", "pat"]).optional()
-});
-var PageExtendedSchema = import_zod_openapi30.z.record(import_zod_openapi30.z.string(), import_zod_openapi30.z.any()).optional();
-var PageSchema = import_zod_openapi30.z.object({
-  _id: import_zod_openapi30.z.string(),
-  path: import_zod_openapi30.z.string(),
-  revision: import_zod_openapi30.z.union([import_zod_openapi30.z.string(), RevisionSchema]).optional(),
-  redirectTo: import_zod_openapi30.z.string().nullable().optional(),
+  editVia: import_zod_openapi31.z.enum(["web", "oauth", "pat"]).optional()
+});
+var PageExtendedSchema = import_zod_openapi31.z.record(import_zod_openapi31.z.string(), import_zod_openapi31.z.any()).optional();
+var PageSchema = import_zod_openapi31.z.object({
+  _id: import_zod_openapi31.z.string(),
+  path: import_zod_openapi31.z.string(),
+  revision: import_zod_openapi31.z.union([import_zod_openapi31.z.string(), RevisionSchema]).optional(),
+  redirectTo: import_zod_openapi31.z.string().nullable().optional(),
   status: PageStatusSchema.nullable().optional(),
-  grant: import_zod_openapi30.z.number().optional(),
-  grantedUsers: import_zod_openapi30.z.array(import_zod_openapi30.z.string()).optional(),
-  creator: import_zod_openapi30.z.union([import_zod_openapi30.z.string(), PageUserSchema]).nullable().optional(),
-  lastUpdateUser: import_zod_openapi30.z.union([import_zod_openapi30.z.string(), PageUserSchema]).nullable().optional(),
-  liker: import_zod_openapi30.z.array(import_zod_openapi30.z.string()).optional(),
-  commentCount: import_zod_openapi30.z.number().default(0),
+  grant: import_zod_openapi31.z.number().optional(),
+  grantedUsers: import_zod_openapi31.z.array(import_zod_openapi31.z.string()).optional(),
+  creator: import_zod_openapi31.z.union([import_zod_openapi31.z.string(), PageUserSchema]).nullable().optional(),
+  lastUpdateUser: import_zod_openapi31.z.union([import_zod_openapi31.z.string(), PageUserSchema]).nullable().optional(),
+  liker: import_zod_openapi31.z.array(import_zod_openapi31.z.string()).optional(),
+  commentCount: import_zod_openapi31.z.number().default(0),
   extended: PageExtendedSchema,
-  createdAt: import_zod_openapi30.z.string(),
-  updatedAt: import_zod_openapi30.z.string().optional(),
+  createdAt: import_zod_openapi31.z.string(),
+  updatedAt: import_zod_openapi31.z.string().optional(),
   // RFC-0003 collaborative-edit fields. All optional; `null` is the
   // "no live state yet" value. Existing read endpoints (list /
   // detail) do not currently emit these — the contract is widened
@@ -2746,32 +3198,32 @@ var PageSchema = import_zod_openapi30.z.object({
   // bump. `yjsState` is intentionally omitted from the contract:
   // the binary blob lives only inside Hocuspocus and never crosses
   // the HTTP API.
-  currentRevision: import_zod_openapi30.z.string().nullable().optional(),
-  yjsCheckpointAt: import_zod_openapi30.z.string().nullable().optional(),
+  currentRevision: import_zod_openapi31.z.string().nullable().optional(),
+  yjsCheckpointAt: import_zod_openapi31.z.string().nullable().optional(),
   // dynamic fields
-  latestRevision: import_zod_openapi30.z.string().optional(),
-  likerCount: import_zod_openapi30.z.number().optional(),
-  seenUsersCount: import_zod_openapi30.z.number().optional()
+  latestRevision: import_zod_openapi31.z.string().optional(),
+  likerCount: import_zod_openapi31.z.number().optional(),
+  seenUsersCount: import_zod_openapi31.z.number().optional()
 });
 var PageWithRevisionSchema = PageSchema.extend({
   revision: RevisionSchema,
   creator: PageUserSchema.nullable().optional(),
   lastUpdateUser: PageUserSchema.nullable().optional()
 });
-var GetPageRequestSchema = import_zod_openapi30.z.object({
-  path: import_zod_openapi30.z.string().optional(),
-  page_id: import_zod_openapi30.z.string().optional(),
-  revision_id: import_zod_openapi30.z.string().optional()
+var GetPageRequestSchema = import_zod_openapi31.z.object({
+  path: import_zod_openapi31.z.string().optional(),
+  page_id: import_zod_openapi31.z.string().optional(),
+  revision_id: import_zod_openapi31.z.string().optional()
 });
-var GetPageResponseSchema = import_zod_openapi30.z.object({
+var GetPageResponseSchema = import_zod_openapi31.z.object({
   page: PageWithRevisionSchema
 });
-var ClaimPageLinkAccessResponseSchema = GetPageResponseSchema.extend({ granted: import_zod_openapi30.z.boolean() });
-var ListPagesRequestSchema = import_zod_openapi30.z.object({
-  path: import_zod_openapi30.z.string().optional(),
-  user: import_zod_openapi30.z.string().optional(),
-  limit: import_zod_openapi30.z.coerce.number().optional().default(50),
-  offset: import_zod_openapi30.z.coerce.number().optional().default(0),
+var ClaimPageLinkAccessResponseSchema = GetPageResponseSchema.extend({ granted: import_zod_openapi31.z.boolean() });
+var ListPagesRequestSchema = import_zod_openapi31.z.object({
+  path: import_zod_openapi31.z.string().optional(),
+  user: import_zod_openapi31.z.string().optional(),
+  limit: import_zod_openapi31.z.coerce.number().optional().default(50),
+  offset: import_zod_openapi31.z.coerce.number().optional().default(0),
   // NOT `z.coerce.boolean()`: that uses JS `Boolean(v)`, so the string
   // `"false"` (which is how the web client serialises `false` on the
   // query string) coerces to `true`. That silently flipped
@@ -2779,25 +3231,25 @@ var ListPagesRequestSchema = import_zod_openapi30.z.object({
   // filter and leak other users' drafts. Parse the string explicitly so
   // only `"true"` / `true` is truthy; anything else (incl. `"false"`,
   // absent) is `false`.
-  include_deleted: import_zod_openapi30.z.preprocess((v) => v === true || v === "true" || v === "1", import_zod_openapi30.z.boolean()).optional().default(false),
+  include_deleted: import_zod_openapi31.z.preprocess((v) => v === true || v === "true" || v === "1", import_zod_openapi31.z.boolean()).optional().default(false),
   // Sort field + direction for the listing. Defaults preserve the legacy
   // "newest-updated first" order so existing callers are unaffected.
   // `path` sorts alphabetically by full page path (≈ name order).
-  sort: import_zod_openapi30.z.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
-  order: import_zod_openapi30.z.enum(["asc", "desc"]).optional().default("desc"),
+  sort: import_zod_openapi31.z.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
+  order: import_zod_openapi31.z.enum(["asc", "desc"]).optional().default("desc"),
   // When listing a portal path (`/foo/`), open the portal document at this
   // past revision so the catch-all can mirror `?revision_id=` on portals.
   // Only the `portalPage` is rewound — the child rows always reflect the
   // latest. Absent for normal listings.
-  revision_id: import_zod_openapi30.z.string().optional()
+  revision_id: import_zod_openapi31.z.string().optional()
 });
-var PagerSchema = import_zod_openapi30.z.object({
-  prev: import_zod_openapi30.z.number().nullable(),
-  next: import_zod_openapi30.z.number().nullable(),
-  offset: import_zod_openapi30.z.number()
+var PagerSchema = import_zod_openapi31.z.object({
+  prev: import_zod_openapi31.z.number().nullable(),
+  next: import_zod_openapi31.z.number().nullable(),
+  offset: import_zod_openapi31.z.number()
 });
-var ListPagesResponseSchema = import_zod_openapi30.z.object({
-  pages: import_zod_openapi30.z.array(PageSchema),
+var ListPagesResponseSchema = import_zod_openapi31.z.object({
+  pages: import_zod_openapi31.z.array(PageSchema),
   pager: PagerSchema,
   portalPage: PageSchema.nullable().optional(),
   // When listing a portal path (`/foo/`) that has NO portal document of
@@ -2807,148 +3259,155 @@ var ListPagesResponseSchema = import_zod_openapi30.z.object({
   // (feature-update-pages-list-ux §4). Mutually exclusive with `portalPage`
   // — only set when `portalPage` is null. Absent / null for ordinary
   // listings.
-  contentPage: PageSchema.nullable().optional()
-});
-var PageChildSegmentSchema = import_zod_openapi30.z.object({
+  contentPage: PageSchema.nullable().optional(),
+  // feature-profile-stats-and-page-total — the exact count of the viewer-
+  // visible set `pages` pages from (i.e. matching `pages`' visibility
+  // conditions, independent of `limit`/`offset`, and excluding whichever
+  // ids `portalPage`/`contentPage` already removed from `pages`). Not part
+  // of `PagerSchema` — mirrors `ListUsersResponseSchema.total`, a sibling
+  // top-level field alongside `pager`.
+  total: import_zod_openapi31.z.number()
+});
+var PageChildSegmentSchema = import_zod_openapi31.z.object({
   // The bare segment name immediately under the queried path
   // (e.g. 'rfc' for /crowi/rfc/... when querying /crowi/).
-  segment: import_zod_openapi30.z.string(),
+  segment: import_zod_openapi31.z.string(),
   // Portal-style path for this segment (always trailing-slashed),
   // e.g. '/crowi/rfc/'. Drop the trailing slash for the page path when
   // the segment is a leaf page (see `isPage`).
-  path: import_zod_openapi30.z.string(),
+  path: import_zod_openapi31.z.string(),
   // True when a real page is saved at the segment path itself
   // (e.g. `/crowi/rfc`, no trailing slash) — i.e. the segment is a
   // navigable page, not only an inferred directory.
-  isPage: import_zod_openapi30.z.boolean(),
+  isPage: import_zod_openapi31.z.boolean(),
   // True when a real portal page is saved at `path` (→ compass icon).
-  hasPortal: import_zod_openapi30.z.boolean(),
+  hasPortal: import_zod_openapi31.z.boolean(),
   // Number of descendant content pages strictly under this segment
   // (excludes the segment's own page / portal docs). A rough "how much
   // lives here" hint; > 0 means the segment is an expandable directory.
-  count: import_zod_openapi30.z.number(),
+  count: import_zod_openapi31.z.number(),
   // ISO8601 timestamp of the segment's representative page: the segment's
   // own page when `isPage` is true, otherwise the most-recently-updated
   // descendant (including the portal doc itself). `null` when no
   // representative page's timestamp could be derived. Optional so
   // existing clients (web SidebarTree) that don't read it keep working
   // unchanged — additive contract extension, feature-child-segments-metadata.
-  lastUpdatedAt: import_zod_openapi30.z.string().nullable().optional(),
+  lastUpdatedAt: import_zod_openapi31.z.string().nullable().optional(),
   // The representative page's last updater (same page as `lastUpdatedAt`
   // above). `null` when the updater can't be resolved (e.g. a deleted
   // user, or legacy rows predating `lastUpdateUser`).
   updater: PageUserSchema.nullable().optional()
 });
-var ListPageChildrenRequestSchema = import_zod_openapi30.z.object({
+var ListPageChildrenRequestSchema = import_zod_openapi31.z.object({
   // Portal path to list children of. Trailing slash optional — the
   // handler normalises it. '/' lists the top-level segments.
-  path: import_zod_openapi30.z.string()
+  path: import_zod_openapi31.z.string()
 });
-var ListPageChildrenResponseSchema = import_zod_openapi30.z.object({
+var ListPageChildrenResponseSchema = import_zod_openapi31.z.object({
   // Sorted alphabetically by segment.
-  children: import_zod_openapi30.z.array(PageChildSegmentSchema)
-});
-var CreatePageRequestSchema = import_zod_openapi30.z.object({
-  path: import_zod_openapi30.z.string(),
-  body: import_zod_openapi30.z.string(),
-  grant: import_zod_openapi30.z.number().optional()
-});
-var UpdatePageRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string(),
-  body: import_zod_openapi30.z.string(),
-  revision_id: import_zod_openapi30.z.string().optional(),
-  grant: import_zod_openapi30.z.number().optional()
-});
-var RevertToRevisionRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string(),
-  revision_id: import_zod_openapi30.z.string()
-});
-var SetPageGrantRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string(),
-  grant: import_zod_openapi30.z.number().int()
-});
-var RenamePageRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string(),
-  new_path: import_zod_openapi30.z.string(),
-  revision_id: import_zod_openapi30.z.string().optional(),
-  create_redirect: import_zod_openapi30.z.boolean().optional(),
+  children: import_zod_openapi31.z.array(PageChildSegmentSchema)
+});
+var CreatePageRequestSchema = import_zod_openapi31.z.object({
+  path: import_zod_openapi31.z.string(),
+  body: import_zod_openapi31.z.string(),
+  grant: import_zod_openapi31.z.number().optional()
+});
+var UpdatePageRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string(),
+  body: import_zod_openapi31.z.string(),
+  revision_id: import_zod_openapi31.z.string().optional(),
+  grant: import_zod_openapi31.z.number().optional()
+});
+var RevertToRevisionRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string(),
+  revision_id: import_zod_openapi31.z.string()
+});
+var SetPageGrantRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string(),
+  grant: import_zod_openapi31.z.number().int()
+});
+var RenamePageRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string(),
+  new_path: import_zod_openapi31.z.string(),
+  revision_id: import_zod_openapi31.z.string().optional(),
+  create_redirect: import_zod_openapi31.z.boolean().optional(),
   // When true, rename the page together with its whole (grant-visible)
   // descendant subtree (renameTree) instead of just the single page.
   // Defaults to false — the single-page rename behaviour.
-  include_descendants: import_zod_openapi30.z.boolean().optional()
+  include_descendants: import_zod_openapi31.z.boolean().optional()
 });
-var RenamePageResponseSchema = import_zod_openapi30.z.object({
+var RenamePageResponseSchema = import_zod_openapi31.z.object({
   page: PageSchema,
-  renamed_count: import_zod_openapi30.z.number()
-});
-var RenameTreeErrorSchema = import_zod_openapi30.z.object({
-  error: import_zod_openapi30.z.object({
-    code: import_zod_openapi30.z.literal("PAGE_RENAME_TREE_FAILED"),
-    message: import_zod_openapi30.z.string(),
-    conflicts: import_zod_openapi30.z.array(
-      import_zod_openapi30.z.object({
-        path: import_zod_openapi30.z.string(),
-        reasons: import_zod_openapi30.z.array(import_zod_openapi30.z.string())
+  renamed_count: import_zod_openapi31.z.number()
+});
+var RenameTreeErrorSchema = import_zod_openapi31.z.object({
+  error: import_zod_openapi31.z.object({
+    code: import_zod_openapi31.z.literal("PAGE_RENAME_TREE_FAILED"),
+    message: import_zod_openapi31.z.string(),
+    conflicts: import_zod_openapi31.z.array(
+      import_zod_openapi31.z.object({
+        path: import_zod_openapi31.z.string(),
+        reasons: import_zod_openapi31.z.array(import_zod_openapi31.z.string())
       })
     ),
     // True when the failure happened after some pages were already moved
     // (non-transactional best-effort). When omitted/false the failure was
     // detected up-front and nothing was moved.
-    partial: import_zod_openapi30.z.boolean().optional()
+    partial: import_zod_openapi31.z.boolean().optional()
   })
 });
-var RenameSubtreeRequestSchema = import_zod_openapi30.z.object({
-  old_path: import_zod_openapi30.z.string(),
-  new_path: import_zod_openapi30.z.string(),
-  create_redirect: import_zod_openapi30.z.boolean().optional()
+var RenameSubtreeRequestSchema = import_zod_openapi31.z.object({
+  old_path: import_zod_openapi31.z.string(),
+  new_path: import_zod_openapi31.z.string(),
+  create_redirect: import_zod_openapi31.z.boolean().optional()
 });
-var RenameSubtreeResponseSchema = import_zod_openapi30.z.object({
-  renamed_count: import_zod_openapi30.z.number()
+var RenameSubtreeResponseSchema = import_zod_openapi31.z.object({
+  renamed_count: import_zod_openapi31.z.number()
 });
-var PageNotFoundErrorSchema = import_zod_openapi30.z.object({
-  error: import_zod_openapi30.z.object({
-    code: import_zod_openapi30.z.literal("PAGE_NOT_FOUND"),
-    message: import_zod_openapi30.z.literal("Page not found")
+var PageNotFoundErrorSchema = import_zod_openapi31.z.object({
+  error: import_zod_openapi31.z.object({
+    code: import_zod_openapi31.z.literal("PAGE_NOT_FOUND"),
+    message: import_zod_openapi31.z.literal("Page not found")
   })
 });
-var PageNotGrantedErrorSchema = import_zod_openapi30.z.object({
-  error: import_zod_openapi30.z.object({
-    code: import_zod_openapi30.z.literal("PAGE_NOT_GRANTED"),
-    message: import_zod_openapi30.z.literal("Page is not granted for the user")
+var PageNotGrantedErrorSchema = import_zod_openapi31.z.object({
+  error: import_zod_openapi31.z.object({
+    code: import_zod_openapi31.z.literal("PAGE_NOT_GRANTED"),
+    message: import_zod_openapi31.z.literal("Page is not granted for the user")
   })
 });
-var PageRevisionErrorSchema = import_zod_openapi30.z.object({
-  error: import_zod_openapi30.z.object({
-    code: import_zod_openapi30.z.literal("PAGE_REVISION_ERROR"),
-    message: import_zod_openapi30.z.string()
+var PageRevisionErrorSchema = import_zod_openapi31.z.object({
+  error: import_zod_openapi31.z.object({
+    code: import_zod_openapi31.z.literal("PAGE_REVISION_ERROR"),
+    message: import_zod_openapi31.z.string()
   })
 });
-var SeenPageRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string()
+var SeenPageRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string()
 });
-var SeenUsersResponseSchema = import_zod_openapi30.z.object({
-  seenUsers: import_zod_openapi30.z.array(UserPublicSchema),
-  seenUsersCount: import_zod_openapi30.z.number()
+var SeenUsersResponseSchema = import_zod_openapi31.z.object({
+  seenUsers: import_zod_openapi31.z.array(UserPublicSchema),
+  seenUsersCount: import_zod_openapi31.z.number()
 });
-var GetSeenUsersRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string(),
+var GetSeenUsersRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string(),
   // Optional cap on returned `seenUsers`. `seenUsersCount` always reflects
   // the full count regardless of `limit`. Omit for the full list.
-  limit: import_zod_openapi30.z.coerce.number().int().positive().optional()
+  limit: import_zod_openapi31.z.coerce.number().int().positive().optional()
 });
-var GetWatchStatusRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string()
+var GetWatchStatusRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string()
 });
-var WatchStatusResponseSchema = import_zod_openapi30.z.object({
-  watching: import_zod_openapi30.z.boolean()
+var WatchStatusResponseSchema = import_zod_openapi31.z.object({
+  watching: import_zod_openapi31.z.boolean()
 });
-var SetWatchStatusRequestSchema = import_zod_openapi30.z.object({
-  page_id: import_zod_openapi30.z.string(),
-  watching: import_zod_openapi30.z.boolean()
+var SetWatchStatusRequestSchema = import_zod_openapi31.z.object({
+  page_id: import_zod_openapi31.z.string(),
+  watching: import_zod_openapi31.z.boolean()
 });
 
 // src/contracts/backlink.ts
-var getBacklinksRoute = (0, import_zod_openapi31.createRoute)({
+var getBacklinksRoute = (0, import_zod_openapi32.createRoute)({
   method: "get",
   path: "/backlinks",
   tags: ["backlink"],
@@ -2981,96 +3440,103 @@ var backlinkRoutes = {
 };
 
 // src/contracts/bookmark.ts
-var import_zod_openapi34 = require("@hono/zod-openapi");
+var import_zod_openapi35 = require("@hono/zod-openapi");
 
 // src/schemas/bookmark.ts
-var import_zod_openapi32 = require("@hono/zod-openapi");
-var BookmarkSchema = import_zod_openapi32.z.object({
-  _id: import_zod_openapi32.z.string(),
+var import_zod_openapi33 = require("@hono/zod-openapi");
+var BookmarkSchema = import_zod_openapi33.z.object({
+  _id: import_zod_openapi33.z.string(),
   page: PageSchema,
-  user: import_zod_openapi32.z.union([import_zod_openapi32.z.string(), UserPublicSchema]),
-  createdAt: import_zod_openapi32.z.string()
+  user: import_zod_openapi33.z.union([import_zod_openapi33.z.string(), UserPublicSchema]),
+  createdAt: import_zod_openapi33.z.string()
 });
-var GetBookmarkRequestSchema = import_zod_openapi32.z.object({
-  page_id: import_zod_openapi32.z.string()
+var GetBookmarkRequestSchema = import_zod_openapi33.z.object({
+  page_id: import_zod_openapi33.z.string()
 });
-var BookmarkResponseSchema = import_zod_openapi32.z.object({
+var BookmarkResponseSchema = import_zod_openapi33.z.object({
   bookmark: BookmarkSchema.nullable()
 });
-var ListMyBookmarksResponseSchema = import_zod_openapi32.z.object({
-  bookmarks: import_zod_openapi32.z.array(BookmarkSchema),
+var ListMyBookmarksResponseSchema = import_zod_openapi33.z.object({
+  bookmarks: import_zod_openapi33.z.array(BookmarkSchema),
   pager: PagerSchema,
-  total: import_zod_openapi32.z.number()
+  total: import_zod_openapi33.z.number()
 });
-var AddBookmarkRequestSchema = import_zod_openapi32.z.object({
-  page_id: import_zod_openapi32.z.string()
+var AddBookmarkRequestSchema = import_zod_openapi33.z.object({
+  page_id: import_zod_openapi33.z.string()
 });
-var RemoveBookmarkRequestSchema = import_zod_openapi32.z.object({
-  page_id: import_zod_openapi32.z.string()
+var RemoveBookmarkRequestSchema = import_zod_openapi33.z.object({
+  page_id: import_zod_openapi33.z.string()
 });
-var RemoveBookmarkResponseSchema = import_zod_openapi32.z.object({
-  ok: import_zod_openapi32.z.literal(true)
+var RemoveBookmarkResponseSchema = import_zod_openapi33.z.object({
+  ok: import_zod_openapi33.z.literal(true)
 });
 
 // src/schemas/user.ts
-var import_zod_openapi33 = require("@hono/zod-openapi");
-var UserStatusSchema = import_zod_openapi33.z.enum(["1", "2", "3", "4", "5"]).transform((val) => Number(val));
+var import_zod_openapi34 = require("@hono/zod-openapi");
+var UserStatusSchema = import_zod_openapi34.z.enum(["1", "2", "3", "4", "5"]).transform((val) => Number(val));
 var UserStatusEnum = UserPublicStatus;
-var UserLanguageSchema = import_zod_openapi33.z.enum(["en", "ja"]);
-var PaginationRequestSchema = import_zod_openapi33.z.object({
-  limit: import_zod_openapi33.z.coerce.number().optional().default(50),
-  offset: import_zod_openapi33.z.coerce.number().optional().default(0)
-});
-var UserListItemSchema = import_zod_openapi33.z.object({
-  _id: import_zod_openapi33.z.string(),
-  username: import_zod_openapi33.z.string(),
-  name: import_zod_openapi33.z.string(),
-  image: import_zod_openapi33.z.string().nullable().optional()
-});
-var ListUsersRequestSchema = import_zod_openapi33.z.object({
-  q: import_zod_openapi33.z.string().optional(),
+var UserLanguageSchema = import_zod_openapi34.z.enum(["en", "ja"]);
+var PaginationRequestSchema = import_zod_openapi34.z.object({
+  limit: import_zod_openapi34.z.coerce.number().optional().default(50),
+  offset: import_zod_openapi34.z.coerce.number().optional().default(0)
+});
+var UserListItemSchema = import_zod_openapi34.z.object({
+  _id: import_zod_openapi34.z.string(),
+  username: import_zod_openapi34.z.string(),
+  name: import_zod_openapi34.z.string(),
+  image: import_zod_openapi34.z.string().nullable().optional()
+});
+var ListUsersRequestSchema = import_zod_openapi34.z.object({
+  q: import_zod_openapi34.z.string().optional(),
   // Cap the page size so a client can't request the whole user table in one
   // unbounded find+sort (mirrors the page-list `limit` guard).
-  limit: import_zod_openapi33.z.coerce.number().int().min(1).max(100).optional().default(24),
-  offset: import_zod_openapi33.z.coerce.number().int().min(0).optional().default(0)
+  limit: import_zod_openapi34.z.coerce.number().int().min(1).max(100).optional().default(24),
+  offset: import_zod_openapi34.z.coerce.number().int().min(0).optional().default(0)
 });
-var UserSubpagesRequestSchema = import_zod_openapi33.z.object({
-  limit: import_zod_openapi33.z.coerce.number().int().min(1).max(50).optional().default(30),
-  offset: import_zod_openapi33.z.coerce.number().int().min(0).optional().default(0)
+var UserSubpagesRequestSchema = import_zod_openapi34.z.object({
+  limit: import_zod_openapi34.z.coerce.number().int().min(1).max(50).optional().default(30),
+  offset: import_zod_openapi34.z.coerce.number().int().min(0).optional().default(0)
 });
-var ListUsersResponseSchema = import_zod_openapi33.z.object({
-  users: import_zod_openapi33.z.array(UserListItemSchema),
+var ListUsersResponseSchema = import_zod_openapi34.z.object({
+  users: import_zod_openapi34.z.array(UserListItemSchema),
   pager: PagerSchema,
-  total: import_zod_openapi33.z.number()
+  total: import_zod_openapi34.z.number()
 });
-var UserPageResponseSchema = import_zod_openapi33.z.object({
+var UserPageResponseSchema = import_zod_openapi34.z.object({
   user: UserPublicSchema,
   // Page statistics
-  createdPagesCount: import_zod_openapi33.z.number(),
-  bookmarksCount: import_zod_openapi33.z.number(),
+  createdPagesCount: import_zod_openapi34.z.number(),
+  bookmarksCount: import_zod_openapi34.z.number(),
+  // feature-profile-stats-and-page-total — the target user's OWN actions:
+  // pages they liked (`Page.liker` contains their id) and comments they
+  // wrote (`Comment.creator` is their id). NOT activity their own pages
+  // received from others, and not re-filtered by the viewer's grants —
+  // see the spec's "プロフィール統計の主語と API 契約" section.
+  likesCount: import_zod_openapi34.z.number(),
+  commentsCount: import_zod_openapi34.z.number(),
   // Optionally include recent items for initial display
-  recentPages: import_zod_openapi33.z.array(PageSchema).optional(),
-  recentBookmarks: import_zod_openapi33.z.array(BookmarkSchema).optional()
+  recentPages: import_zod_openapi34.z.array(PageSchema).optional(),
+  recentBookmarks: import_zod_openapi34.z.array(BookmarkSchema).optional()
 });
-var UserBookmarksResponseSchema = import_zod_openapi33.z.object({
-  bookmarks: import_zod_openapi33.z.array(BookmarkSchema),
+var UserBookmarksResponseSchema = import_zod_openapi34.z.object({
+  bookmarks: import_zod_openapi34.z.array(BookmarkSchema),
   pager: PagerSchema,
-  total: import_zod_openapi33.z.number()
+  total: import_zod_openapi34.z.number()
 });
-var UserPagesResponseSchema = import_zod_openapi33.z.object({
-  pages: import_zod_openapi33.z.array(PageSchema),
+var UserPagesResponseSchema = import_zod_openapi34.z.object({
+  pages: import_zod_openapi34.z.array(PageSchema),
   pager: PagerSchema,
-  total: import_zod_openapi33.z.number()
+  total: import_zod_openapi34.z.number()
 });
-var UserNotFoundErrorSchema = import_zod_openapi33.z.object({
-  error: import_zod_openapi33.z.object({
-    code: import_zod_openapi33.z.literal("USER_NOT_FOUND"),
-    message: import_zod_openapi33.z.literal("User not found")
+var UserNotFoundErrorSchema = import_zod_openapi34.z.object({
+  error: import_zod_openapi34.z.object({
+    code: import_zod_openapi34.z.literal("USER_NOT_FOUND"),
+    message: import_zod_openapi34.z.literal("User not found")
   })
 });
 
 // src/contracts/bookmark.ts
-var getBookmarkRoute = (0, import_zod_openapi34.createRoute)({
+var getBookmarkRoute = (0, import_zod_openapi35.createRoute)({
   method: "get",
   path: "/bookmarks",
   tags: ["bookmark"],
@@ -3098,7 +3564,7 @@ var getBookmarkRoute = (0, import_zod_openapi34.createRoute)({
     }
   }
 });
-var listMyBookmarksRoute = (0, import_zod_openapi34.createRoute)({
+var listMyBookmarksRoute = (0, import_zod_openapi35.createRoute)({
   method: "get",
   path: "/bookmarks/me",
   tags: ["bookmark"],
@@ -3122,7 +3588,7 @@ var listMyBookmarksRoute = (0, import_zod_openapi34.createRoute)({
     }
   }
 });
-var addBookmarkRoute = (0, import_zod_openapi34.createRoute)({
+var addBookmarkRoute = (0, import_zod_openapi35.createRoute)({
   method: "post",
   path: "/bookmarks",
   tags: ["bookmark"],
@@ -3152,7 +3618,7 @@ var addBookmarkRoute = (0, import_zod_openapi34.createRoute)({
     }
   }
 });
-var removeBookmarkRoute = (0, import_zod_openapi34.createRoute)({
+var removeBookmarkRoute = (0, import_zod_openapi35.createRoute)({
   method: "delete",
   path: "/bookmarks",
   tags: ["bookmark"],
@@ -3190,59 +3656,59 @@ var bookmarkRoutes = {
 };
 
 // src/contracts/comment.ts
-var import_zod_openapi36 = require("@hono/zod-openapi");
+var import_zod_openapi37 = require("@hono/zod-openapi");
 
 // src/schemas/comment.ts
-var import_zod_openapi35 = require("@hono/zod-openapi");
-var CommentSchema = import_zod_openapi35.z.object({
-  _id: import_zod_openapi35.z.string(),
-  page: import_zod_openapi35.z.string(),
+var import_zod_openapi36 = require("@hono/zod-openapi");
+var CommentSchema = import_zod_openapi36.z.object({
+  _id: import_zod_openapi36.z.string(),
+  page: import_zod_openapi36.z.string(),
   // creator is populated to a user object on the API side; allow string fallback for safety
-  creator: import_zod_openapi35.z.union([import_zod_openapi35.z.string(), PageUserSchema]).nullable(),
-  revision: import_zod_openapi35.z.string(),
-  comment: import_zod_openapi35.z.string(),
-  commentPosition: import_zod_openapi35.z.number().default(-1),
-  createdAt: import_zod_openapi35.z.string()
-});
-var ListCommentsRequestSchema = import_zod_openapi35.z.object({
-  page_id: import_zod_openapi35.z.string().optional(),
-  revision_id: import_zod_openapi35.z.string().optional()
-});
-var ListCommentsResponseSchema = import_zod_openapi35.z.object({
-  comments: import_zod_openapi35.z.array(CommentSchema)
-});
-var AddCommentRequestSchema = import_zod_openapi35.z.object({
-  page_id: import_zod_openapi35.z.string().min(1, "page_id is required"),
-  revision_id: import_zod_openapi35.z.string().min(1, "revision_id is required"),
-  comment: import_zod_openapi35.z.string().min(1, "comment is required"),
-  comment_position: import_zod_openapi35.z.number().int().optional()
-});
-var AddCommentResponseSchema = import_zod_openapi35.z.object({
+  creator: import_zod_openapi36.z.union([import_zod_openapi36.z.string(), PageUserSchema]).nullable(),
+  revision: import_zod_openapi36.z.string(),
+  comment: import_zod_openapi36.z.string(),
+  commentPosition: import_zod_openapi36.z.number().default(-1),
+  createdAt: import_zod_openapi36.z.string()
+});
+var ListCommentsRequestSchema = import_zod_openapi36.z.object({
+  page_id: import_zod_openapi36.z.string().optional(),
+  revision_id: import_zod_openapi36.z.string().optional()
+});
+var ListCommentsResponseSchema = import_zod_openapi36.z.object({
+  comments: import_zod_openapi36.z.array(CommentSchema)
+});
+var AddCommentRequestSchema = import_zod_openapi36.z.object({
+  page_id: import_zod_openapi36.z.string().min(1, "page_id is required"),
+  revision_id: import_zod_openapi36.z.string().min(1, "revision_id is required"),
+  comment: import_zod_openapi36.z.string().min(1, "comment is required"),
+  comment_position: import_zod_openapi36.z.number().int().optional()
+});
+var AddCommentResponseSchema = import_zod_openapi36.z.object({
   comment: CommentSchema,
-  newlyWatching: import_zod_openapi35.z.boolean()
+  newlyWatching: import_zod_openapi36.z.boolean()
 });
-var DeleteCommentRequestSchema = import_zod_openapi35.z.object({
-  comment_id: import_zod_openapi35.z.string().min(1, "comment_id is required"),
-  page_id: import_zod_openapi35.z.string().min(1, "page_id is required")
+var DeleteCommentRequestSchema = import_zod_openapi36.z.object({
+  comment_id: import_zod_openapi36.z.string().min(1, "comment_id is required"),
+  page_id: import_zod_openapi36.z.string().min(1, "page_id is required")
 });
-var DeleteCommentResponseSchema = import_zod_openapi35.z.object({
-  ok: import_zod_openapi35.z.literal(true)
+var DeleteCommentResponseSchema = import_zod_openapi36.z.object({
+  ok: import_zod_openapi36.z.literal(true)
 });
-var CommentNotFoundErrorSchema = import_zod_openapi35.z.object({
-  error: import_zod_openapi35.z.object({
-    code: import_zod_openapi35.z.literal("COMMENT_NOT_FOUND"),
-    message: import_zod_openapi35.z.literal("Comment not found")
+var CommentNotFoundErrorSchema = import_zod_openapi36.z.object({
+  error: import_zod_openapi36.z.object({
+    code: import_zod_openapi36.z.literal("COMMENT_NOT_FOUND"),
+    message: import_zod_openapi36.z.literal("Comment not found")
   })
 });
-var CommentInvalidRequestErrorSchema = import_zod_openapi35.z.object({
-  error: import_zod_openapi35.z.object({
-    code: import_zod_openapi35.z.literal("INVALID_REQUEST"),
-    message: import_zod_openapi35.z.string()
+var CommentInvalidRequestErrorSchema = import_zod_openapi36.z.object({
+  error: import_zod_openapi36.z.object({
+    code: import_zod_openapi36.z.literal("INVALID_REQUEST"),
+    message: import_zod_openapi36.z.string()
   })
 });
 
 // src/contracts/comment.ts
-var listCommentsRoute = (0, import_zod_openapi36.createRoute)({
+var listCommentsRoute = (0, import_zod_openapi37.createRoute)({
   method: "get",
   path: "/comments",
   tags: ["comment"],
@@ -3270,7 +3736,7 @@ var listCommentsRoute = (0, import_zod_openapi36.createRoute)({
     }
   }
 });
-var addCommentRoute = (0, import_zod_openapi36.createRoute)({
+var addCommentRoute = (0, import_zod_openapi37.createRoute)({
   method: "post",
   path: "/comments",
   tags: ["comment"],
@@ -3300,7 +3766,7 @@ var addCommentRoute = (0, import_zod_openapi36.createRoute)({
     }
   }
 });
-var deleteCommentRoute = (0, import_zod_openapi36.createRoute)({
+var deleteCommentRoute = (0, import_zod_openapi37.createRoute)({
   method: "delete",
   path: "/comments",
   tags: ["comment"],
@@ -3341,50 +3807,50 @@ var commentRoutes = {
 };
 
 // src/contracts/draft.ts
-var import_zod_openapi38 = require("@hono/zod-openapi");
+var import_zod_openapi39 = require("@hono/zod-openapi");
 
 // src/schemas/draft.ts
-var import_zod_openapi37 = require("@hono/zod-openapi");
-var CreateDraftRequestSchema = import_zod_openapi37.z.object({
-  path: import_zod_openapi37.z.string().min(1),
-  initialBody: import_zod_openapi37.z.string().optional()
+var import_zod_openapi38 = require("@hono/zod-openapi");
+var CreateDraftRequestSchema = import_zod_openapi38.z.object({
+  path: import_zod_openapi38.z.string().min(1),
+  initialBody: import_zod_openapi38.z.string().optional()
 });
-var CreateDraftResponseSchema = import_zod_openapi37.z.object({
-  pageId: import_zod_openapi37.z.string()
+var CreateDraftResponseSchema = import_zod_openapi38.z.object({
+  pageId: import_zod_openapi38.z.string()
 });
-var DraftConflictOwnerSchema = import_zod_openapi37.z.object({
-  id: import_zod_openapi37.z.string(),
-  username: import_zod_openapi37.z.string(),
-  displayName: import_zod_openapi37.z.string()
+var DraftConflictOwnerSchema = import_zod_openapi38.z.object({
+  id: import_zod_openapi38.z.string(),
+  username: import_zod_openapi38.z.string(),
+  displayName: import_zod_openapi38.z.string()
 });
-var DraftPathConflictErrorSchema = import_zod_openapi37.z.object({
-  error: import_zod_openapi37.z.literal("path_taken_by_draft"),
+var DraftPathConflictErrorSchema = import_zod_openapi38.z.object({
+  error: import_zod_openapi38.z.literal("path_taken_by_draft"),
   owner: DraftConflictOwnerSchema,
-  message: import_zod_openapi37.z.string()
+  message: import_zod_openapi38.z.string()
 });
-var DraftBadRequestErrorSchema = import_zod_openapi37.z.object({
-  error: import_zod_openapi37.z.enum(["invalid_path", "path_taken"]),
-  message: import_zod_openapi37.z.string()
+var DraftBadRequestErrorSchema = import_zod_openapi38.z.object({
+  error: import_zod_openapi38.z.enum(["invalid_path", "path_taken"]),
+  message: import_zod_openapi38.z.string()
 });
-var DraftNotFoundErrorSchema = import_zod_openapi37.z.object({
-  error: import_zod_openapi37.z.literal("draft_not_found"),
-  message: import_zod_openapi37.z.string()
+var DraftNotFoundErrorSchema = import_zod_openapi38.z.object({
+  error: import_zod_openapi38.z.literal("draft_not_found"),
+  message: import_zod_openapi38.z.string()
 });
-var DraftSummarySchema = import_zod_openapi37.z.object({
-  pageId: import_zod_openapi37.z.string(),
-  path: import_zod_openapi37.z.string(),
-  createdAt: import_zod_openapi37.z.string(),
-  updatedAt: import_zod_openapi37.z.string()
+var DraftSummarySchema = import_zod_openapi38.z.object({
+  pageId: import_zod_openapi38.z.string(),
+  path: import_zod_openapi38.z.string(),
+  createdAt: import_zod_openapi38.z.string(),
+  updatedAt: import_zod_openapi38.z.string()
 });
-var ListDraftsResponseSchema = import_zod_openapi37.z.object({
-  drafts: import_zod_openapi37.z.array(DraftSummarySchema)
+var ListDraftsResponseSchema = import_zod_openapi38.z.object({
+  drafts: import_zod_openapi38.z.array(DraftSummarySchema)
 });
 
 // src/contracts/draft.ts
-var DraftIdPathParamsSchema = import_zod_openapi38.z.object({
-  id: import_zod_openapi38.z.string().openapi({ description: "Draft page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var DraftIdPathParamsSchema = import_zod_openapi39.z.object({
+  id: import_zod_openapi39.z.string().openapi({ description: "Draft page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var createDraftRoute = (0, import_zod_openapi38.createRoute)({
+var createDraftRoute = (0, import_zod_openapi39.createRoute)({
   method: "post",
   path: "/pages/drafts",
   tags: ["draft"],
@@ -3414,7 +3880,7 @@ var createDraftRoute = (0, import_zod_openapi38.createRoute)({
     }
   }
 });
-var listDraftsRoute = (0, import_zod_openapi38.createRoute)({
+var listDraftsRoute = (0, import_zod_openapi39.createRoute)({
   method: "get",
   path: "/pages/drafts",
   tags: ["draft"],
@@ -3431,7 +3897,7 @@ var listDraftsRoute = (0, import_zod_openapi38.createRoute)({
     }
   }
 });
-var cancelDraftRoute = (0, import_zod_openapi38.createRoute)({
+var cancelDraftRoute = (0, import_zod_openapi39.createRoute)({
   method: "delete",
   path: "/pages/drafts/{id}",
   tags: ["draft"],
@@ -3462,29 +3928,35 @@ var draftRoutes = {
 };
 
 // src/contracts/installer.ts
+var import_zod_openapi42 = require("@hono/zod-openapi");
+
+// src/schemas/installer.ts
+var import_zod_openapi41 = require("@hono/zod-openapi");
+
+// src/schemas/username.ts
 var import_zod_openapi40 = require("@hono/zod-openapi");
+var UsernameSchema = import_zod_openapi40.z.string().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/, "username may only contain letters, digits, hyphens, and underscores");
 
 // src/schemas/installer.ts
-var import_zod_openapi39 = require("@hono/zod-openapi");
-var InstallerStatusResponseSchema = import_zod_openapi39.z.object({
-  status: import_zod_openapi39.z.enum(["installer_required", "already_installed"])
-});
-var CreateAdminRequestSchema = import_zod_openapi39.z.object({
-  registerForm: import_zod_openapi39.z.object({
-    username: import_zod_openapi39.z.string().min(1).regex(/^[\da-zA-Z\-_.]+$/, "username may only contain letters, digits, hyphens, underscores, and dots"),
-    name: import_zod_openapi39.z.string().min(1),
-    email: import_zod_openapi39.z.string().email(),
-    password: import_zod_openapi39.z.string().min(6).regex(/^[\x20-\x7F]{6,}$/, "password must be 6+ printable ASCII characters")
+var InstallerStatusResponseSchema = import_zod_openapi41.z.object({
+  status: import_zod_openapi41.z.enum(["installer_required", "already_installed"])
+});
+var CreateAdminRequestSchema = import_zod_openapi41.z.object({
+  registerForm: import_zod_openapi41.z.object({
+    username: UsernameSchema,
+    name: import_zod_openapi41.z.string().min(1),
+    email: import_zod_openapi41.z.string().email(),
+    password: import_zod_openapi41.z.string().min(6).regex(/^[\x20-\x7F]{6,}$/, "password must be 6+ printable ASCII characters")
   })
 });
-var CreateAdminResponseSchema = import_zod_openapi39.z.object({
-  status: import_zod_openapi39.z.enum(["ok", "error"]),
-  message: import_zod_openapi39.z.string().optional(),
-  errors: import_zod_openapi39.z.array(import_zod_openapi39.z.string()).optional()
+var CreateAdminResponseSchema = import_zod_openapi41.z.object({
+  status: import_zod_openapi41.z.enum(["ok", "error"]),
+  message: import_zod_openapi41.z.string().optional(),
+  errors: import_zod_openapi41.z.array(import_zod_openapi41.z.string()).optional()
 });
 
 // src/contracts/installer.ts
-var getInstallerStatusRoute = (0, import_zod_openapi40.createRoute)({
+var getInstallerStatusRoute = (0, import_zod_openapi42.createRoute)({
   method: "get",
   path: "/installer",
   tags: ["installer"],
@@ -3508,7 +3980,7 @@ var getInstallerStatusRoute = (0, import_zod_openapi40.createRoute)({
     }
   }
 });
-var createAdminRoute = (0, import_zod_openapi40.createRoute)({
+var createAdminRoute = (0, import_zod_openapi42.createRoute)({
   method: "post",
   path: "/installer/createAdmin",
   tags: ["installer"],
@@ -3552,88 +4024,88 @@ var createAdminRoute = (0, import_zod_openapi40.createRoute)({
 var installerRoutes = { getInstallerStatusRoute, createAdminRoute };
 
 // src/contracts/me.ts
-var import_zod_openapi42 = require("@hono/zod-openapi");
+var import_zod_openapi44 = require("@hono/zod-openapi");
 
 // src/schemas/me.ts
-var import_zod_openapi41 = require("@hono/zod-openapi");
-var LanguageSchema = import_zod_openapi41.z.enum(["en", "ja"]);
-var ThemeSchema = import_zod_openapi41.z.enum(["system", "light", "dark"]);
-var UserProfileResponseSchema = import_zod_openapi41.z.object({
-  id: import_zod_openapi41.z.string(),
-  username: import_zod_openapi41.z.string(),
-  name: import_zod_openapi41.z.string(),
-  email: import_zod_openapi41.z.string().email(),
+var import_zod_openapi43 = require("@hono/zod-openapi");
+var LanguageSchema = import_zod_openapi43.z.enum(["en", "ja"]);
+var ThemeSchema = import_zod_openapi43.z.enum(["system", "light", "dark"]);
+var UserProfileResponseSchema = import_zod_openapi43.z.object({
+  id: import_zod_openapi43.z.string(),
+  username: import_zod_openapi43.z.string(),
+  name: import_zod_openapi43.z.string(),
+  email: import_zod_openapi43.z.string().email(),
   lang: LanguageSchema,
   theme: ThemeSchema,
-  image: import_zod_openapi41.z.string().nullable(),
-  introduction: import_zod_openapi41.z.string().optional(),
-  hasPassword: import_zod_openapi41.z.boolean(),
-  createdAt: import_zod_openapi41.z.string(),
+  image: import_zod_openapi43.z.string().nullable(),
+  introduction: import_zod_openapi43.z.string().optional(),
+  hasPassword: import_zod_openapi43.z.boolean(),
+  createdAt: import_zod_openapi43.z.string(),
   /**
    * True when the profile update requested a new email that is awaiting
    * confirmation: the stored `email` is unchanged and a confirmation
    * link was sent to the new address.
    */
-  emailChangePending: import_zod_openapi41.z.boolean().optional()
+  emailChangePending: import_zod_openapi43.z.boolean().optional()
 });
-var UpdateProfileRequestSchema = import_zod_openapi41.z.object({
-  userForm: import_zod_openapi41.z.object({
-    name: import_zod_openapi41.z.string().min(1, "Name is required"),
-    email: import_zod_openapi41.z.string().email("Invalid email format"),
+var UpdateProfileRequestSchema = import_zod_openapi43.z.object({
+  userForm: import_zod_openapi43.z.object({
+    name: import_zod_openapi43.z.string().min(1, "Name is required"),
+    email: import_zod_openapi43.z.string().email("Invalid email format"),
     lang: LanguageSchema
   })
 });
-var UpdateThemeRequestSchema = import_zod_openapi41.z.object({
+var UpdateThemeRequestSchema = import_zod_openapi43.z.object({
   theme: ThemeSchema
 });
-var ThemeUpdateResponseSchema = import_zod_openapi41.z.object({
-  status: import_zod_openapi41.z.literal("ok"),
+var ThemeUpdateResponseSchema = import_zod_openapi43.z.object({
+  status: import_zod_openapi43.z.literal("ok"),
   theme: ThemeSchema
 });
-var PictureUploadResponseSchema = import_zod_openapi41.z.object({
-  status: import_zod_openapi41.z.boolean(),
-  url: import_zod_openapi41.z.string().optional(),
-  message: import_zod_openapi41.z.string().optional()
+var PictureUploadResponseSchema = import_zod_openapi43.z.object({
+  status: import_zod_openapi43.z.boolean(),
+  url: import_zod_openapi43.z.string().optional(),
+  message: import_zod_openapi43.z.string().optional()
 });
-var SuccessResponseSchema = import_zod_openapi41.z.object({
-  status: import_zod_openapi41.z.literal("ok"),
-  message: import_zod_openapi41.z.string().optional()
+var SuccessResponseSchema = import_zod_openapi43.z.object({
+  status: import_zod_openapi43.z.literal("ok"),
+  message: import_zod_openapi43.z.string().optional()
 });
-var ProfileErrorResponseSchema = import_zod_openapi41.z.object({
-  status: import_zod_openapi41.z.literal("error"),
+var ProfileErrorResponseSchema = import_zod_openapi43.z.object({
+  status: import_zod_openapi43.z.literal("error"),
   /** Stable code so the web can localize the message (e.g. EMAIL_TAKEN). */
-  code: import_zod_openapi41.z.string().optional(),
-  message: import_zod_openapi41.z.string().optional(),
-  errors: import_zod_openapi41.z.array(import_zod_openapi41.z.string()).optional()
+  code: import_zod_openapi43.z.string().optional(),
+  message: import_zod_openapi43.z.string().optional(),
+  errors: import_zod_openapi43.z.array(import_zod_openapi43.z.string()).optional()
 });
 var PASSWORD_REGEX = /^(?=.*[a-zA-Z])(?=.*\d)(?=.*[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?`~])[a-zA-Z\d!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?`~]+$/;
-var UpdatePasswordRequestSchema = import_zod_openapi41.z.object({
-  oldPassword: import_zod_openapi41.z.string().optional(),
-  newPassword: import_zod_openapi41.z.string().min(8, "Password must be at least 8 characters").max(100, "Password must be at most 100 characters").regex(PASSWORD_REGEX, "Password must contain at least one letter, one digit, and one special character"),
-  newPasswordConfirm: import_zod_openapi41.z.string()
+var UpdatePasswordRequestSchema = import_zod_openapi43.z.object({
+  oldPassword: import_zod_openapi43.z.string().optional(),
+  newPassword: import_zod_openapi43.z.string().min(8, "Password must be at least 8 characters").max(100, "Password must be at most 100 characters").regex(PASSWORD_REGEX, "Password must contain at least one letter, one digit, and one special character"),
+  newPasswordConfirm: import_zod_openapi43.z.string()
 }).refine((data) => data.newPassword === data.newPasswordConfirm, {
   message: "Passwords do not match",
   path: ["newPasswordConfirm"]
 });
-var PasswordUpdateSuccessSchema = import_zod_openapi41.z.object({
-  status: import_zod_openapi41.z.literal("ok"),
-  message: import_zod_openapi41.z.string(),
-  accessToken: import_zod_openapi41.z.string(),
-  refreshToken: import_zod_openapi41.z.string(),
+var PasswordUpdateSuccessSchema = import_zod_openapi43.z.object({
+  status: import_zod_openapi43.z.literal("ok"),
+  message: import_zod_openapi43.z.string(),
+  accessToken: import_zod_openapi43.z.string(),
+  refreshToken: import_zod_openapi43.z.string(),
   /** Access-token lifetime in seconds. */
-  expiresIn: import_zod_openapi41.z.number()
+  expiresIn: import_zod_openapi43.z.number()
 });
-var PasswordErrorResponseSchema = import_zod_openapi41.z.object({
-  status: import_zod_openapi41.z.literal("error"),
-  message: import_zod_openapi41.z.string(),
-  errors: import_zod_openapi41.z.array(import_zod_openapi41.z.string()).optional()
+var PasswordErrorResponseSchema = import_zod_openapi43.z.object({
+  status: import_zod_openapi43.z.literal("error"),
+  message: import_zod_openapi43.z.string(),
+  errors: import_zod_openapi43.z.array(import_zod_openapi43.z.string()).optional()
 });
-var RecentlyViewedPagesResponseSchema = import_zod_openapi41.z.object({
-  pages: import_zod_openapi41.z.array(PageSchema)
+var RecentlyViewedPagesResponseSchema = import_zod_openapi43.z.object({
+  pages: import_zod_openapi43.z.array(PageSchema)
 });
 
 // src/contracts/me.ts
-var getProfileRoute = (0, import_zod_openapi42.createRoute)({
+var getProfileRoute = (0, import_zod_openapi44.createRoute)({
   method: "get",
   path: "/me",
   tags: ["me"],
@@ -3650,7 +4122,7 @@ var getProfileRoute = (0, import_zod_openapi42.createRoute)({
     }
   }
 });
-var updateProfileRoute = (0, import_zod_openapi42.createRoute)({
+var updateProfileRoute = (0, import_zod_openapi44.createRoute)({
   method: "put",
   path: "/me",
   tags: ["me"],
@@ -3676,7 +4148,7 @@ var updateProfileRoute = (0, import_zod_openapi42.createRoute)({
     }
   }
 });
-var updateThemeRoute = (0, import_zod_openapi42.createRoute)({
+var updateThemeRoute = (0, import_zod_openapi44.createRoute)({
   method: "patch",
   path: "/me/theme",
   tags: ["me"],
@@ -3702,7 +4174,7 @@ var updateThemeRoute = (0, import_zod_openapi42.createRoute)({
     }
   }
 });
-var uploadPictureRoute = (0, import_zod_openapi42.createRoute)({
+var uploadPictureRoute = (0, import_zod_openapi44.createRoute)({
   method: "post",
   path: "/me/picture",
   tags: ["me"],
@@ -3712,8 +4184,8 @@ var uploadPictureRoute = (0, import_zod_openapi42.createRoute)({
     body: {
       content: {
         "multipart/form-data": {
-          schema: import_zod_openapi42.z.object({
-            file: import_zod_openapi42.z.any().optional().describe("Profile picture file")
+          schema: import_zod_openapi44.z.object({
+            file: import_zod_openapi44.z.any().optional().describe("Profile picture file")
           })
         }
       }
@@ -3734,7 +4206,7 @@ var uploadPictureRoute = (0, import_zod_openapi42.createRoute)({
     }
   }
 });
-var deletePictureRoute = (0, import_zod_openapi42.createRoute)({
+var deletePictureRoute = (0, import_zod_openapi44.createRoute)({
   method: "delete",
   path: "/me/picture",
   tags: ["me"],
@@ -3755,7 +4227,7 @@ var deletePictureRoute = (0, import_zod_openapi42.createRoute)({
     }
   }
 });
-var updatePasswordRoute = (0, import_zod_openapi42.createRoute)({
+var updatePasswordRoute = (0, import_zod_openapi44.createRoute)({
   method: "put",
   path: "/me/password",
   tags: ["me"],
@@ -3781,7 +4253,7 @@ var updatePasswordRoute = (0, import_zod_openapi42.createRoute)({
     }
   }
 });
-var recentlyViewedPagesRoute = (0, import_zod_openapi42.createRoute)({
+var recentlyViewedPagesRoute = (0, import_zod_openapi44.createRoute)({
   method: "get",
   path: "/me/recently-viewed-pages",
   tags: ["me"],
@@ -3813,43 +4285,43 @@ var meRoutes = {
 };
 
 // src/contracts/access-token.ts
-var import_zod_openapi44 = require("@hono/zod-openapi");
+var import_zod_openapi46 = require("@hono/zod-openapi");
 
 // src/schemas/access-token.ts
-var import_zod_openapi43 = require("@hono/zod-openapi");
-var AccessTokenSchema = import_zod_openapi43.z.object({
-  id: import_zod_openapi43.z.string(),
-  name: import_zod_openapi43.z.string(),
-  scopes: import_zod_openapi43.z.array(import_zod_openapi43.z.string()),
+var import_zod_openapi45 = require("@hono/zod-openapi");
+var AccessTokenSchema = import_zod_openapi45.z.object({
+  id: import_zod_openapi45.z.string(),
+  name: import_zod_openapi45.z.string(),
+  scopes: import_zod_openapi45.z.array(import_zod_openapi45.z.string()),
   /** ISO-8601 expiry, or `null` for a non-expiring token. */
-  expiresAt: import_zod_openapi43.z.string().nullable(),
+  expiresAt: import_zod_openapi45.z.string().nullable(),
   /** ISO-8601 of last successful use, or `null` if never used. */
-  lastUsedAt: import_zod_openapi43.z.string().nullable(),
-  createdAt: import_zod_openapi43.z.string()
+  lastUsedAt: import_zod_openapi45.z.string().nullable(),
+  createdAt: import_zod_openapi45.z.string()
 });
-var ListAccessTokensResponseSchema = import_zod_openapi43.z.object({
-  accessTokens: import_zod_openapi43.z.array(AccessTokenSchema)
+var ListAccessTokensResponseSchema = import_zod_openapi45.z.object({
+  accessTokens: import_zod_openapi45.z.array(AccessTokenSchema)
 });
-var CreateAccessTokenRequestSchema = import_zod_openapi43.z.object({
-  name: import_zod_openapi43.z.string().min(1, "Name is required").max(200),
-  scopes: import_zod_openapi43.z.array(import_zod_openapi43.z.string()).min(1, "At least one scope is required"),
-  expiresAt: import_zod_openapi43.z.string().datetime().nullable().optional()
+var CreateAccessTokenRequestSchema = import_zod_openapi45.z.object({
+  name: import_zod_openapi45.z.string().min(1, "Name is required").max(200),
+  scopes: import_zod_openapi45.z.array(import_zod_openapi45.z.string()).min(1, "At least one scope is required"),
+  expiresAt: import_zod_openapi45.z.string().datetime().nullable().optional()
 });
 var CreateAccessTokenResponseSchema = AccessTokenSchema.extend({
-  token: import_zod_openapi43.z.string()
-});
-var InvalidScopeErrorSchema = import_zod_openapi43.z.object({
-  error: import_zod_openapi43.z.object({
-    code: import_zod_openapi43.z.literal("INVALID_SCOPE"),
-    message: import_zod_openapi43.z.string(),
-    details: import_zod_openapi43.z.object({
-      invalidScopes: import_zod_openapi43.z.array(import_zod_openapi43.z.string())
+  token: import_zod_openapi45.z.string()
+});
+var InvalidScopeErrorSchema = import_zod_openapi45.z.object({
+  error: import_zod_openapi45.z.object({
+    code: import_zod_openapi45.z.literal("INVALID_SCOPE"),
+    message: import_zod_openapi45.z.string(),
+    details: import_zod_openapi45.z.object({
+      invalidScopes: import_zod_openapi45.z.array(import_zod_openapi45.z.string())
     }).optional()
   })
 });
 
 // src/contracts/access-token.ts
-var listAccessTokensRoute = (0, import_zod_openapi44.createRoute)({
+var listAccessTokensRoute = (0, import_zod_openapi46.createRoute)({
   method: "get",
   path: "/me/access-tokens",
   tags: ["me"],
@@ -3874,7 +4346,7 @@ var listAccessTokensRoute = (0, import_zod_openapi44.createRoute)({
     }
   }
 });
-var createAccessTokenRoute = (0, import_zod_openapi44.createRoute)({
+var createAccessTokenRoute = (0, import_zod_openapi46.createRoute)({
   method: "post",
   path: "/me/access-tokens",
   tags: ["me"],
@@ -3908,14 +4380,14 @@ var createAccessTokenRoute = (0, import_zod_openapi44.createRoute)({
     }
   }
 });
-var deleteAccessTokenRoute = (0, import_zod_openapi44.createRoute)({
+var deleteAccessTokenRoute = (0, import_zod_openapi46.createRoute)({
   method: "delete",
   path: "/me/access-tokens/{id}",
   tags: ["me"],
   security: [{ bearerAuth: [] }],
   summary: "Revoke a personal access token",
   request: {
-    params: import_zod_openapi44.z.object({ id: import_zod_openapi44.z.string() })
+    params: import_zod_openapi46.z.object({ id: import_zod_openapi46.z.string() })
   },
   responses: {
     200: {
@@ -3947,13 +4419,13 @@ var accessTokenRoutes = {
 };
 
 // src/contracts/oauth.ts
-var import_zod_openapi47 = require("@hono/zod-openapi");
+var import_zod_openapi49 = require("@hono/zod-openapi");
 
 // src/schemas/oauth-endpoints.ts
-var import_zod_openapi46 = require("@hono/zod-openapi");
+var import_zod_openapi48 = require("@hono/zod-openapi");
 
 // src/schemas/oauth.ts
-var import_zod_openapi45 = require("@hono/zod-openapi");
+var import_zod_openapi47 = require("@hono/zod-openapi");
 var SCOPES = [
   // umbrella
   "read",
@@ -4021,11 +4493,11 @@ function scopeSatisfies(required, granted) {
   return false;
 }
 var InsufficientScopeErrorSchema = ApiErrorSchema.extend({
-  error: import_zod_openapi45.z.object({
-    code: import_zod_openapi45.z.literal("INSUFFICIENT_SCOPE"),
-    message: import_zod_openapi45.z.string(),
-    details: import_zod_openapi45.z.object({
-      requiredScope: import_zod_openapi45.z.string()
+  error: import_zod_openapi47.z.object({
+    code: import_zod_openapi47.z.literal("INSUFFICIENT_SCOPE"),
+    message: import_zod_openapi47.z.string(),
+    details: import_zod_openapi47.z.object({
+      requiredScope: import_zod_openapi47.z.string()
     }).optional()
   })
 });
@@ -4044,102 +4516,102 @@ var OAUTH_ERROR_CODES = [
   "slow_down",
   "expired_token"
 ];
-var OAuthErrorSchema = import_zod_openapi46.z.object({
-  error: import_zod_openapi46.z.enum(OAUTH_ERROR_CODES),
-  error_description: import_zod_openapi46.z.string().optional()
-});
-var AuthorizeRequestSchema = import_zod_openapi46.z.object({
-  client_id: import_zod_openapi46.z.string().min(1),
-  redirect_uri: import_zod_openapi46.z.string().min(1),
-  scope: import_zod_openapi46.z.string().min(1),
-  code_challenge: import_zod_openapi46.z.string().min(1),
-  code_challenge_method: import_zod_openapi46.z.literal("S256"),
-  state: import_zod_openapi46.z.string().optional()
-});
-var AuthorizeResponseSchema = import_zod_openapi46.z.object({
-  redirectUri: import_zod_openapi46.z.string()
-});
-var TokenRequestSchema = import_zod_openapi46.z.discriminatedUnion("grant_type", [
-  import_zod_openapi46.z.object({
-    grant_type: import_zod_openapi46.z.literal("authorization_code"),
-    code: import_zod_openapi46.z.string().min(1),
-    code_verifier: import_zod_openapi46.z.string().min(1),
-    redirect_uri: import_zod_openapi46.z.string().min(1),
-    client_id: import_zod_openapi46.z.string().min(1)
+var OAuthErrorSchema = import_zod_openapi48.z.object({
+  error: import_zod_openapi48.z.enum(OAUTH_ERROR_CODES),
+  error_description: import_zod_openapi48.z.string().optional()
+});
+var AuthorizeRequestSchema = import_zod_openapi48.z.object({
+  client_id: import_zod_openapi48.z.string().min(1),
+  redirect_uri: import_zod_openapi48.z.string().min(1),
+  scope: import_zod_openapi48.z.string().min(1),
+  code_challenge: import_zod_openapi48.z.string().min(1),
+  code_challenge_method: import_zod_openapi48.z.literal("S256"),
+  state: import_zod_openapi48.z.string().optional()
+});
+var AuthorizeResponseSchema = import_zod_openapi48.z.object({
+  redirectUri: import_zod_openapi48.z.string()
+});
+var TokenRequestSchema = import_zod_openapi48.z.discriminatedUnion("grant_type", [
+  import_zod_openapi48.z.object({
+    grant_type: import_zod_openapi48.z.literal("authorization_code"),
+    code: import_zod_openapi48.z.string().min(1),
+    code_verifier: import_zod_openapi48.z.string().min(1),
+    redirect_uri: import_zod_openapi48.z.string().min(1),
+    client_id: import_zod_openapi48.z.string().min(1)
   }),
-  import_zod_openapi46.z.object({
-    grant_type: import_zod_openapi46.z.literal("refresh_token"),
-    refresh_token: import_zod_openapi46.z.string().min(1),
-    client_id: import_zod_openapi46.z.string().min(1),
-    scope: import_zod_openapi46.z.string().optional()
+  import_zod_openapi48.z.object({
+    grant_type: import_zod_openapi48.z.literal("refresh_token"),
+    refresh_token: import_zod_openapi48.z.string().min(1),
+    client_id: import_zod_openapi48.z.string().min(1),
+    scope: import_zod_openapi48.z.string().optional()
   }),
   // RFC 8628 §3.4 — device authorization grant. The client polls with the
   // opaque `device_code` returned by `/oauth/device/authorize`.
-  import_zod_openapi46.z.object({
-    grant_type: import_zod_openapi46.z.literal("urn:ietf:params:oauth:grant-type:device_code"),
-    device_code: import_zod_openapi46.z.string().min(1),
-    client_id: import_zod_openapi46.z.string().min(1)
+  import_zod_openapi48.z.object({
+    grant_type: import_zod_openapi48.z.literal("urn:ietf:params:oauth:grant-type:device_code"),
+    device_code: import_zod_openapi48.z.string().min(1),
+    client_id: import_zod_openapi48.z.string().min(1)
   })
 ]);
 var DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
-var TokenResponseSchema = import_zod_openapi46.z.object({
-  access_token: import_zod_openapi46.z.string(),
-  token_type: import_zod_openapi46.z.literal("Bearer"),
-  expires_in: import_zod_openapi46.z.number(),
-  refresh_token: import_zod_openapi46.z.string(),
-  scope: import_zod_openapi46.z.string()
-});
-var RevokeRequestSchema = import_zod_openapi46.z.object({
-  token: import_zod_openapi46.z.string().min(1),
-  token_type_hint: import_zod_openapi46.z.string().optional()
-});
-var RevokeResponseSchema = import_zod_openapi46.z.object({});
-var DeviceAuthorizeRequestSchema = import_zod_openapi46.z.object({
-  client_id: import_zod_openapi46.z.string().min(1),
-  scope: import_zod_openapi46.z.string().min(1)
-});
-var DeviceAuthorizeResponseSchema = import_zod_openapi46.z.object({
-  device_code: import_zod_openapi46.z.string(),
-  user_code: import_zod_openapi46.z.string(),
-  verification_uri: import_zod_openapi46.z.string(),
-  verification_uri_complete: import_zod_openapi46.z.string(),
-  expires_in: import_zod_openapi46.z.number(),
-  interval: import_zod_openapi46.z.number()
-});
-var DeviceVerifyRequestSchema = import_zod_openapi46.z.object({
-  user_code: import_zod_openapi46.z.string().min(1),
-  action: import_zod_openapi46.z.enum(["approve", "deny"])
-});
-var DeviceVerifyResponseSchema = import_zod_openapi46.z.object({
-  status: import_zod_openapi46.z.enum(["approved", "denied"])
-});
-var DeviceInfoResponseSchema = import_zod_openapi46.z.object({
-  client_id: import_zod_openapi46.z.string(),
-  scopes: import_zod_openapi46.z.array(import_zod_openapi46.z.string())
-});
-var ClientInfoResponseSchema = import_zod_openapi46.z.object({
-  clientId: import_zod_openapi46.z.string(),
-  name: import_zod_openapi46.z.string(),
-  firstParty: import_zod_openapi46.z.boolean(),
-  trusted: import_zod_openapi46.z.boolean()
+var TokenResponseSchema = import_zod_openapi48.z.object({
+  access_token: import_zod_openapi48.z.string(),
+  token_type: import_zod_openapi48.z.literal("Bearer"),
+  expires_in: import_zod_openapi48.z.number(),
+  refresh_token: import_zod_openapi48.z.string(),
+  scope: import_zod_openapi48.z.string()
+});
+var RevokeRequestSchema = import_zod_openapi48.z.object({
+  token: import_zod_openapi48.z.string().min(1),
+  token_type_hint: import_zod_openapi48.z.string().optional()
+});
+var RevokeResponseSchema = import_zod_openapi48.z.object({});
+var DeviceAuthorizeRequestSchema = import_zod_openapi48.z.object({
+  client_id: import_zod_openapi48.z.string().min(1),
+  scope: import_zod_openapi48.z.string().min(1)
+});
+var DeviceAuthorizeResponseSchema = import_zod_openapi48.z.object({
+  device_code: import_zod_openapi48.z.string(),
+  user_code: import_zod_openapi48.z.string(),
+  verification_uri: import_zod_openapi48.z.string(),
+  verification_uri_complete: import_zod_openapi48.z.string(),
+  expires_in: import_zod_openapi48.z.number(),
+  interval: import_zod_openapi48.z.number()
+});
+var DeviceVerifyRequestSchema = import_zod_openapi48.z.object({
+  user_code: import_zod_openapi48.z.string().min(1),
+  action: import_zod_openapi48.z.enum(["approve", "deny"])
+});
+var DeviceVerifyResponseSchema = import_zod_openapi48.z.object({
+  status: import_zod_openapi48.z.enum(["approved", "denied"])
+});
+var DeviceInfoResponseSchema = import_zod_openapi48.z.object({
+  client_id: import_zod_openapi48.z.string(),
+  scopes: import_zod_openapi48.z.array(import_zod_openapi48.z.string())
+});
+var ClientInfoResponseSchema = import_zod_openapi48.z.object({
+  clientId: import_zod_openapi48.z.string(),
+  name: import_zod_openapi48.z.string(),
+  firstParty: import_zod_openapi48.z.boolean(),
+  trusted: import_zod_openapi48.z.boolean()
 });
 var GRANT_TYPES_SUPPORTED = ["authorization_code", "refresh_token", DEVICE_CODE_GRANT_TYPE];
-var DiscoveryResponseSchema = import_zod_openapi46.z.object({
-  issuer: import_zod_openapi46.z.string(),
-  authorization_endpoint: import_zod_openapi46.z.string(),
-  token_endpoint: import_zod_openapi46.z.string(),
-  revocation_endpoint: import_zod_openapi46.z.string(),
-  device_authorization_endpoint: import_zod_openapi46.z.string().optional(),
-  scopes_supported: import_zod_openapi46.z.array(import_zod_openapi46.z.string()),
-  response_types_supported: import_zod_openapi46.z.array(import_zod_openapi46.z.string()),
-  grant_types_supported: import_zod_openapi46.z.array(import_zod_openapi46.z.string()),
-  code_challenge_methods_supported: import_zod_openapi46.z.array(import_zod_openapi46.z.string()),
-  token_endpoint_auth_methods_supported: import_zod_openapi46.z.array(import_zod_openapi46.z.string())
+var DiscoveryResponseSchema = import_zod_openapi48.z.object({
+  issuer: import_zod_openapi48.z.string(),
+  authorization_endpoint: import_zod_openapi48.z.string(),
+  token_endpoint: import_zod_openapi48.z.string(),
+  revocation_endpoint: import_zod_openapi48.z.string(),
+  device_authorization_endpoint: import_zod_openapi48.z.string().optional(),
+  scopes_supported: import_zod_openapi48.z.array(import_zod_openapi48.z.string()),
+  response_types_supported: import_zod_openapi48.z.array(import_zod_openapi48.z.string()),
+  grant_types_supported: import_zod_openapi48.z.array(import_zod_openapi48.z.string()),
+  code_challenge_methods_supported: import_zod_openapi48.z.array(import_zod_openapi48.z.string()),
+  token_endpoint_auth_methods_supported: import_zod_openapi48.z.array(import_zod_openapi48.z.string())
 });
 var DISCOVERY_SCOPES_SUPPORTED = ISSUABLE_SCOPES;
 
 // src/contracts/oauth.ts
-var authorizeRoute = (0, import_zod_openapi47.createRoute)({
+var authorizeRoute = (0, import_zod_openapi49.createRoute)({
   method: "post",
   path: "/oauth/authorize",
   tags: ["oauth"],
@@ -4169,7 +4641,7 @@ var authorizeRoute = (0, import_zod_openapi47.createRoute)({
     }
   }
 });
-var tokenRoute = (0, import_zod_openapi47.createRoute)({
+var tokenRoute = (0, import_zod_openapi49.createRoute)({
   method: "post",
   path: "/oauth/token",
   tags: ["oauth"],
@@ -4201,7 +4673,7 @@ var tokenRoute = (0, import_zod_openapi47.createRoute)({
     }
   }
 });
-var revokeRoute = (0, import_zod_openapi47.createRoute)({
+var revokeRoute = (0, import_zod_openapi49.createRoute)({
   method: "post",
   path: "/oauth/revoke",
   tags: ["oauth"],
@@ -4221,7 +4693,7 @@ var revokeRoute = (0, import_zod_openapi47.createRoute)({
     }
   }
 });
-var discoveryRoute = (0, import_zod_openapi47.createRoute)({
+var discoveryRoute = (0, import_zod_openapi49.createRoute)({
   method: "get",
   path: "/.well-known/oauth-authorization-server",
   tags: ["oauth"],
@@ -4233,7 +4705,7 @@ var discoveryRoute = (0, import_zod_openapi47.createRoute)({
     }
   }
 });
-var deviceAuthorizeRoute = (0, import_zod_openapi47.createRoute)({
+var deviceAuthorizeRoute = (0, import_zod_openapi49.createRoute)({
   method: "post",
   path: "/oauth/device/authorize",
   tags: ["oauth"],
@@ -4261,7 +4733,7 @@ var deviceAuthorizeRoute = (0, import_zod_openapi47.createRoute)({
     }
   }
 });
-var deviceInfoRoute = (0, import_zod_openapi47.createRoute)({
+var deviceInfoRoute = (0, import_zod_openapi49.createRoute)({
   method: "get",
   path: "/oauth/device",
   tags: ["oauth"],
@@ -4270,7 +4742,7 @@ var deviceInfoRoute = (0, import_zod_openapi47.createRoute)({
   // scopes so the web consent screen can show them before approval. Reveals
   // no secret. Unknown / expired / non-pending → 404 (PHASE4-Q9 option A).
   request: {
-    query: import_zod_openapi47.z.object({ user_code: import_zod_openapi47.z.string().min(1) })
+    query: import_zod_openapi49.z.object({ user_code: import_zod_openapi49.z.string().min(1) })
   },
   responses: {
     200: {
@@ -4283,7 +4755,7 @@ var deviceInfoRoute = (0, import_zod_openapi47.createRoute)({
     }
   }
 });
-var deviceVerifyRoute = (0, import_zod_openapi47.createRoute)({
+var deviceVerifyRoute = (0, import_zod_openapi49.createRoute)({
   method: "post",
   path: "/oauth/device/verify",
   tags: ["oauth"],
@@ -4313,7 +4785,7 @@ var deviceVerifyRoute = (0, import_zod_openapi47.createRoute)({
     }
   }
 });
-var clientInfoRoute = (0, import_zod_openapi47.createRoute)({
+var clientInfoRoute = (0, import_zod_openapi49.createRoute)({
   method: "get",
   path: "/oauth/client-info",
   tags: ["oauth"],
@@ -4324,7 +4796,7 @@ var clientInfoRoute = (0, import_zod_openapi47.createRoute)({
   // no redirectUris/allowedScopes — mirroring deviceInfoRoute's own
   // non-secret-lookup shape. Unknown client_id → 404.
   request: {
-    query: import_zod_openapi47.z.object({ client_id: import_zod_openapi47.z.string().min(1) })
+    query: import_zod_openapi49.z.object({ client_id: import_zod_openapi49.z.string().min(1) })
   },
   responses: {
     200: {
@@ -4349,24 +4821,24 @@ var oauthRoutes = {
 };
 
 // src/contracts/notification.ts
-var import_zod_openapi49 = require("@hono/zod-openapi");
+var import_zod_openapi51 = require("@hono/zod-openapi");
 
 // src/schemas/notification.ts
-var import_zod_openapi48 = require("@hono/zod-openapi");
-var NotificationStatusSchema = import_zod_openapi48.z.enum(["UNREAD", "UNOPENED", "OPENED"]);
+var import_zod_openapi50 = require("@hono/zod-openapi");
+var NotificationStatusSchema = import_zod_openapi50.z.enum(["UNREAD", "UNOPENED", "OPENED"]);
 var NotificationStatusEnum = {
   UNREAD: "UNREAD",
   UNOPENED: "UNOPENED",
   OPENED: "OPENED"
 };
-var NotificationActionSchema = import_zod_openapi48.z.enum(["COMMENT", "LIKE", "MENTION", "UPDATE"]);
+var NotificationActionSchema = import_zod_openapi50.z.enum(["COMMENT", "LIKE", "MENTION", "UPDATE"]);
 var NotificationActionEnum = {
   COMMENT: "COMMENT",
   LIKE: "LIKE",
   MENTION: "MENTION",
   UPDATE: "UPDATE"
 };
-var NotificationTargetModelSchema = import_zod_openapi48.z.enum(["Page"]);
+var NotificationTargetModelSchema = import_zod_openapi50.z.enum(["Page"]);
 var NotificationTargetModelEnum = {
   PAGE: "Page"
 };
@@ -4375,71 +4847,71 @@ var PageRefSchema = PageSchema.pick({
   path: true,
   status: true
 });
-var NotificationSchema = import_zod_openapi48.z.object({
-  _id: import_zod_openapi48.z.string(),
-  user: import_zod_openapi48.z.string(),
+var NotificationSchema = import_zod_openapi50.z.object({
+  _id: import_zod_openapi50.z.string(),
+  user: import_zod_openapi50.z.string(),
   targetModel: NotificationTargetModelSchema,
   target: PageRefSchema,
   action: NotificationActionSchema,
   status: NotificationStatusSchema,
-  actionUsers: import_zod_openapi48.z.array(UserPublicSchema),
-  createdAt: import_zod_openapi48.z.string()
+  actionUsers: import_zod_openapi50.z.array(UserPublicSchema),
+  createdAt: import_zod_openapi50.z.string()
 });
-var ListNotificationsRequestSchema = import_zod_openapi48.z.object({
-  limit: import_zod_openapi48.z.coerce.number().optional().default(10),
-  offset: import_zod_openapi48.z.coerce.number().optional().default(0)
+var ListNotificationsRequestSchema = import_zod_openapi50.z.object({
+  limit: import_zod_openapi50.z.coerce.number().optional().default(10),
+  offset: import_zod_openapi50.z.coerce.number().optional().default(0)
 });
-var ListNotificationsResponseSchema = import_zod_openapi48.z.object({
-  notifications: import_zod_openapi48.z.array(NotificationSchema),
+var ListNotificationsResponseSchema = import_zod_openapi50.z.object({
+  notifications: import_zod_openapi50.z.array(NotificationSchema),
   pager: PagerSchema
 });
-var MarkAllAsReadResponseSchema = import_zod_openapi48.z.object({
-  ok: import_zod_openapi48.z.literal(true)
+var MarkAllAsReadResponseSchema = import_zod_openapi50.z.object({
+  ok: import_zod_openapi50.z.literal(true)
 });
-var OpenNotificationParamSchema = import_zod_openapi48.z.object({
-  id: import_zod_openapi48.z.string()
+var OpenNotificationParamSchema = import_zod_openapi50.z.object({
+  id: import_zod_openapi50.z.string()
 });
-var OpenNotificationResponseSchema = import_zod_openapi48.z.object({
+var OpenNotificationResponseSchema = import_zod_openapi50.z.object({
   notification: NotificationSchema
 });
-var NotificationStatusResponseSchema = import_zod_openapi48.z.object({
-  count: import_zod_openapi48.z.number()
+var NotificationStatusResponseSchema = import_zod_openapi50.z.object({
+  count: import_zod_openapi50.z.number()
 });
-var NotificationNotFoundErrorSchema = import_zod_openapi48.z.object({
-  error: import_zod_openapi48.z.object({
-    code: import_zod_openapi48.z.literal("NOTIFICATION_NOT_FOUND"),
-    message: import_zod_openapi48.z.literal("Notification not found")
+var NotificationNotFoundErrorSchema = import_zod_openapi50.z.object({
+  error: import_zod_openapi50.z.object({
+    code: import_zod_openapi50.z.literal("NOTIFICATION_NOT_FOUND"),
+    message: import_zod_openapi50.z.literal("Notification not found")
   })
 });
-var NotificationsTokenResponseSchema = import_zod_openapi48.z.object({
-  token: import_zod_openapi48.z.string(),
-  selfUserId: import_zod_openapi48.z.string(),
-  expiresAt: import_zod_openapi48.z.string()
+var NotificationsTokenResponseSchema = import_zod_openapi50.z.object({
+  token: import_zod_openapi50.z.string(),
+  selfUserId: import_zod_openapi50.z.string(),
+  expiresAt: import_zod_openapi50.z.string()
 });
-var NotificationsTokenPayloadSchema = import_zod_openapi48.z.object({
-  selfUserId: import_zod_openapi48.z.string(),
+var NotificationsTokenPayloadSchema = import_zod_openapi50.z.object({
+  selfUserId: import_zod_openapi50.z.string(),
   // Random UUID mixed into every signed token so two tokens minted
   // within the same second still produce byte-different JWT strings.
   // The browser uses the token as a React effect dependency to drive
   // the WebSocket reconnect — without `jti`, the iat/exp pair is
   // identical at second granularity and the dep stays stable.
-  jti: import_zod_openapi48.z.string().uuid(),
-  iat: import_zod_openapi48.z.number().int(),
-  exp: import_zod_openapi48.z.number().int()
+  jti: import_zod_openapi50.z.string().uuid(),
+  iat: import_zod_openapi50.z.number().int(),
+  exp: import_zod_openapi50.z.number().int()
 });
-var NotificationsChangedMessageSchema = import_zod_openapi48.z.object({
-  type: import_zod_openapi48.z.literal("changed")
+var NotificationsChangedMessageSchema = import_zod_openapi50.z.object({
+  type: import_zod_openapi50.z.literal("changed")
 });
 var NotificationsServerMessageSchema = NotificationsChangedMessageSchema;
 
 // src/contracts/notification.ts
-var NotificationInvalidRequestErrorSchema = import_zod_openapi49.z.object({
-  error: import_zod_openapi49.z.object({
-    code: import_zod_openapi49.z.literal("INVALID_REQUEST"),
-    message: import_zod_openapi49.z.string()
+var NotificationInvalidRequestErrorSchema = import_zod_openapi51.z.object({
+  error: import_zod_openapi51.z.object({
+    code: import_zod_openapi51.z.literal("INVALID_REQUEST"),
+    message: import_zod_openapi51.z.string()
   })
 });
-var listNotificationsRoute = (0, import_zod_openapi49.createRoute)({
+var listNotificationsRoute = (0, import_zod_openapi51.createRoute)({
   method: "get",
   path: "/notifications",
   tags: ["notification"],
@@ -4463,7 +4935,7 @@ var listNotificationsRoute = (0, import_zod_openapi49.createRoute)({
     }
   }
 });
-var markAllAsReadRoute = (0, import_zod_openapi49.createRoute)({
+var markAllAsReadRoute = (0, import_zod_openapi51.createRoute)({
   method: "post",
   path: "/notifications/read",
   tags: ["notification"],
@@ -4484,7 +4956,7 @@ var markAllAsReadRoute = (0, import_zod_openapi49.createRoute)({
     }
   }
 });
-var getUnreadCountRoute = (0, import_zod_openapi49.createRoute)({
+var getUnreadCountRoute = (0, import_zod_openapi51.createRoute)({
   method: "get",
   path: "/notifications/status",
   tags: ["notification"],
@@ -4505,7 +4977,7 @@ var getUnreadCountRoute = (0, import_zod_openapi49.createRoute)({
     }
   }
 });
-var openNotificationRoute = (0, import_zod_openapi49.createRoute)({
+var openNotificationRoute = (0, import_zod_openapi51.createRoute)({
   method: "post",
   path: "/notifications/{id}/open",
   tags: ["notification"],
@@ -4537,7 +5009,7 @@ var openNotificationRoute = (0, import_zod_openapi49.createRoute)({
     }
   }
 });
-var getNotificationsTokenRoute = (0, import_zod_openapi49.createRoute)({
+var getNotificationsTokenRoute = (0, import_zod_openapi51.createRoute)({
   method: "get",
   path: "/notifications/token",
   tags: ["notification"],
@@ -4572,11 +5044,11 @@ var notificationRoutes = {
 };
 
 // src/contracts/page-collab.ts
-var import_zod_openapi50 = require("@hono/zod-openapi");
-var PageIdPathParamsSchema2 = import_zod_openapi50.z.object({
-  id: import_zod_openapi50.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var import_zod_openapi52 = require("@hono/zod-openapi");
+var PageIdPathParamsSchema2 = import_zod_openapi52.z.object({
+  id: import_zod_openapi52.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var getYjsTokenRoute = (0, import_zod_openapi50.createRoute)({
+var getYjsTokenRoute = (0, import_zod_openapi52.createRoute)({
   method: "get",
   path: "/pages/{id}/yjs-token",
   tags: ["page-collab"],
@@ -4613,26 +5085,26 @@ var pageCollabRoutes = {
 };
 
 // src/contracts/page.ts
-var import_zod_openapi51 = require("@hono/zod-openapi");
-var PageBadRequestErrorSchema = import_zod_openapi51.z.object({
-  error: import_zod_openapi51.z.object({
-    code: import_zod_openapi51.z.string(),
-    message: import_zod_openapi51.z.string()
+var import_zod_openapi53 = require("@hono/zod-openapi");
+var PageBadRequestErrorSchema = import_zod_openapi53.z.object({
+  error: import_zod_openapi53.z.object({
+    code: import_zod_openapi53.z.string(),
+    message: import_zod_openapi53.z.string()
   })
 });
-var DeletePageRequestSchema = import_zod_openapi51.z.object({
-  page_id: import_zod_openapi51.z.string(),
-  revision_id: import_zod_openapi51.z.string().optional(),
-  completely: import_zod_openapi51.z.boolean().optional()
+var DeletePageRequestSchema = import_zod_openapi53.z.object({
+  page_id: import_zod_openapi53.z.string(),
+  revision_id: import_zod_openapi53.z.string().optional(),
+  completely: import_zod_openapi53.z.boolean().optional()
 });
-var RevertDeletedPageRequestSchema = import_zod_openapi51.z.object({
-  page_id: import_zod_openapi51.z.string()
+var RevertDeletedPageRequestSchema = import_zod_openapi53.z.object({
+  page_id: import_zod_openapi53.z.string()
 });
-var PageIdBodySchema = import_zod_openapi51.z.object({
-  page_id: import_zod_openapi51.z.string()
+var PageIdBodySchema = import_zod_openapi53.z.object({
+  page_id: import_zod_openapi53.z.string()
 });
-var PageResponseSchema = import_zod_openapi51.z.object({ page: PageSchema });
-var getPageRoute = (0, import_zod_openapi51.createRoute)({
+var PageResponseSchema = import_zod_openapi53.z.object({ page: PageSchema });
+var getPageRoute = (0, import_zod_openapi53.createRoute)({
   method: "get",
   path: "/pages",
   tags: ["page"],
@@ -4643,7 +5115,7 @@ var getPageRoute = (0, import_zod_openapi51.createRoute)({
   },
   responses: {
     200: {
-      description: "The requested page with populated revision",
+      description: "The requested page with populated revision. `revision.renderedAst` shape is content-negotiated via the `X-Crowi-Ast-Version` request header (RFC-0023): requests declaring `X-Crowi-Ast-Version: 1` receive the typed `{astVersion, root}` envelope; all other requests receive the stored bare mdast Root verbatim. The response varies on this header (`Vary: X-Crowi-Ast-Version`).",
       content: { "application/json": { schema: GetPageResponseSchema } }
     },
     401: {
@@ -4669,7 +5141,7 @@ var getPageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var listPagesRoute = (0, import_zod_openapi51.createRoute)({
+var listPagesRoute = (0, import_zod_openapi53.createRoute)({
   method: "get",
   path: "/pages/list",
   tags: ["page"],
@@ -4680,7 +5152,7 @@ var listPagesRoute = (0, import_zod_openapi51.createRoute)({
   },
   responses: {
     200: {
-      description: "Page list (newest first) with optional portal page",
+      description: "Page list (newest first) with optional portal page and an accurate `total` (the full, unpaginated count of the same viewer-visible set `pages` is a page of). The portal document is the only row carrying `revision.renderedAst`; its shape is content-negotiated via the `X-Crowi-Ast-Version` request header (RFC-0023, same semantics as GET /pages). The response varies on this header (`Vary: X-Crowi-Ast-Version`).",
       content: { "application/json": { schema: ListPagesResponseSchema } }
     },
     401: {
@@ -4689,7 +5161,7 @@ var listPagesRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var listPageChildrenRoute = (0, import_zod_openapi51.createRoute)({
+var listPageChildrenRoute = (0, import_zod_openapi53.createRoute)({
   method: "get",
   path: "/pages/children",
   tags: ["page"],
@@ -4709,7 +5181,7 @@ var listPageChildrenRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var createPageRoute = (0, import_zod_openapi51.createRoute)({
+var createPageRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages",
   tags: ["page"],
@@ -4735,7 +5207,7 @@ var createPageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var updatePageRoute = (0, import_zod_openapi51.createRoute)({
+var updatePageRoute = (0, import_zod_openapi53.createRoute)({
   method: "put",
   path: "/pages",
   tags: ["page"],
@@ -4769,7 +5241,7 @@ var updatePageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var setPageGrantRoute = (0, import_zod_openapi51.createRoute)({
+var setPageGrantRoute = (0, import_zod_openapi53.createRoute)({
   method: "put",
   path: "/pages/grant",
   tags: ["page"],
@@ -4799,7 +5271,7 @@ var setPageGrantRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var seenPageRoute = (0, import_zod_openapi51.createRoute)({
+var seenPageRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/seen",
   tags: ["page"],
@@ -4829,7 +5301,7 @@ var seenPageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var getSeenUsersRoute = (0, import_zod_openapi51.createRoute)({
+var getSeenUsersRoute = (0, import_zod_openapi53.createRoute)({
   method: "get",
   path: "/pages/seen-users",
   tags: ["page"],
@@ -4857,7 +5329,7 @@ var getSeenUsersRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var likePageRoute = (0, import_zod_openapi51.createRoute)({
+var likePageRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/like",
   tags: ["page"],
@@ -4887,7 +5359,7 @@ var likePageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var unlikePageRoute = (0, import_zod_openapi51.createRoute)({
+var unlikePageRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/unlike",
   tags: ["page"],
@@ -4917,7 +5389,7 @@ var unlikePageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var claimPageLinkAccessRoute = (0, import_zod_openapi51.createRoute)({
+var claimPageLinkAccessRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/link-access",
   tags: ["page"],
@@ -4945,7 +5417,7 @@ var claimPageLinkAccessRoute = (0, import_zod_openapi51.createRoute)({
       description: "The caller has no access to the page (isGrantedFor is false) or lacks scope / is a non-web session \u2014 403 is about the caller lacking access, never about the page grant type per se",
       content: {
         "application/json": {
-          schema: import_zod_openapi51.z.union([PageNotGrantedErrorSchema, InsufficientScopeErrorSchema])
+          schema: import_zod_openapi53.z.union([PageNotGrantedErrorSchema, InsufficientScopeErrorSchema])
         }
       }
     },
@@ -4963,7 +5435,7 @@ var claimPageLinkAccessRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var getWatchStatusRoute = (0, import_zod_openapi51.createRoute)({
+var getWatchStatusRoute = (0, import_zod_openapi53.createRoute)({
   method: "get",
   path: "/pages/watch",
   tags: ["page"],
@@ -4991,7 +5463,7 @@ var getWatchStatusRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var setWatchStatusRoute = (0, import_zod_openapi51.createRoute)({
+var setWatchStatusRoute = (0, import_zod_openapi53.createRoute)({
   method: "put",
   path: "/pages/watch",
   tags: ["page"],
@@ -5021,7 +5493,7 @@ var setWatchStatusRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var deletePageRoute = (0, import_zod_openapi51.createRoute)({
+var deletePageRoute = (0, import_zod_openapi53.createRoute)({
   method: "delete",
   path: "/pages",
   tags: ["page"],
@@ -5055,7 +5527,7 @@ var deletePageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var revertDeletedPageRoute = (0, import_zod_openapi51.createRoute)({
+var revertDeletedPageRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/revert",
   tags: ["page"],
@@ -5085,7 +5557,7 @@ var revertDeletedPageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var revertToRevisionRoute = (0, import_zod_openapi51.createRoute)({
+var revertToRevisionRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/revert-to-revision",
   tags: ["page"],
@@ -5115,7 +5587,7 @@ var revertToRevisionRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var renamePageRoute = (0, import_zod_openapi51.createRoute)({
+var renamePageRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/rename",
   tags: ["page"],
@@ -5135,7 +5607,7 @@ var renamePageRoute = (0, import_zod_openapi51.createRoute)({
       description: "PAGE_INVALID_NAME / PAGE_EXISTS / PAGE_RENAME_FAILED / PAGE_RENAME_TREE_FAILED",
       content: {
         "application/json": {
-          schema: import_zod_openapi51.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
+          schema: import_zod_openapi53.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
         }
       }
     },
@@ -5153,7 +5625,7 @@ var renamePageRoute = (0, import_zod_openapi51.createRoute)({
     }
   }
 });
-var renameSubtreeRoute = (0, import_zod_openapi51.createRoute)({
+var renameSubtreeRoute = (0, import_zod_openapi53.createRoute)({
   method: "post",
   path: "/pages/rename-subtree",
   tags: ["page"],
@@ -5173,7 +5645,7 @@ var renameSubtreeRoute = (0, import_zod_openapi51.createRoute)({
       description: "PAGE_INVALID_NAME / PAGE_RENAME_TREE_FAILED (collisions, nothing to move, or partial failure)",
       content: {
         "application/json": {
-          schema: import_zod_openapi51.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
+          schema: import_zod_openapi53.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
         }
       }
     },
@@ -5223,19 +5695,20 @@ var pageRoutes = {
 };
 
 // src/contracts/page-preview.ts
-var import_zod_openapi53 = require("@hono/zod-openapi");
+var import_zod_openapi55 = require("@hono/zod-openapi");
 
 // src/schemas/page-preview.ts
-var import_zod_openapi52 = require("@hono/zod-openapi");
-var PreviewPageRequestSchema = import_zod_openapi52.z.object({
-  body: import_zod_openapi52.z.string()
+var import_zod_openapi54 = require("@hono/zod-openapi");
+var PreviewPageRequestSchema = import_zod_openapi54.z.object({
+  body: import_zod_openapi54.z.string()
 });
-var PreviewPageResponseSchema = import_zod_openapi52.z.object({
-  renderedAst: import_zod_openapi52.z.unknown()
+var PreviewPageResponseSchema = import_zod_openapi54.z.object({
+  renderedAst: RenderedAstValueSchema.optional(),
+  renderedAstArtifactKey: RenderedAstArtifactKeySchema.optional()
 });
 
 // src/contracts/page-preview.ts
-var previewPageRoute = (0, import_zod_openapi53.createRoute)({
+var previewPageRoute = (0, import_zod_openapi55.createRoute)({
   method: "post",
   path: "/pages/preview",
   tags: ["page-preview"],
@@ -5248,7 +5721,7 @@ var previewPageRoute = (0, import_zod_openapi53.createRoute)({
   },
   responses: {
     200: {
-      description: "Rendered mdast tree (serialised \u2014 same shape as a persisted revision.renderedAst)",
+      description: "Rendered mdast tree (serialised \u2014 same shape as a persisted revision.renderedAst). Content-negotiated via the `X-Crowi-Ast-Version` request header (RFC-0023): requests declaring `X-Crowi-Ast-Version: 1` receive the typed `{astVersion, root}` envelope; all other requests receive the bare mdast Root. The response varies on this header (`Vary: X-Crowi-Ast-Version`).",
       content: { "application/json": { schema: PreviewPageResponseSchema } }
     },
     401: {
@@ -5273,80 +5746,80 @@ var pagePreviewRoutes = {
 };
 
 // src/contracts/presence.ts
-var import_zod_openapi55 = require("@hono/zod-openapi");
+var import_zod_openapi57 = require("@hono/zod-openapi");
 
 // src/schemas/presence.ts
-var import_zod_openapi54 = require("@hono/zod-openapi");
-var PresenceTokenResponseSchema = import_zod_openapi54.z.object({
-  token: import_zod_openapi54.z.string(),
-  pageId: import_zod_openapi54.z.string(),
-  selfUserId: import_zod_openapi54.z.string(),
-  expiresAt: import_zod_openapi54.z.string()
-});
-var PresenceTokenPayloadSchema = import_zod_openapi54.z.object({
-  userId: import_zod_openapi54.z.string(),
-  pageId: import_zod_openapi54.z.string(),
-  iat: import_zod_openapi54.z.number().int(),
-  exp: import_zod_openapi54.z.number().int()
-});
-var PresenceViewerSchema = import_zod_openapi54.z.object({
-  userId: import_zod_openapi54.z.string(),
-  username: import_zod_openapi54.z.string(),
-  displayName: import_zod_openapi54.z.string(),
-  avatarUrl: import_zod_openapi54.z.string().nullable(),
-  isEditing: import_zod_openapi54.z.boolean(),
-  joinedAt: import_zod_openapi54.z.number().int()
-});
-var PresenceHeartbeatMessageSchema = import_zod_openapi54.z.object({
-  type: import_zod_openapi54.z.literal("heartbeat")
+var import_zod_openapi56 = require("@hono/zod-openapi");
+var PresenceTokenResponseSchema = import_zod_openapi56.z.object({
+  token: import_zod_openapi56.z.string(),
+  pageId: import_zod_openapi56.z.string(),
+  selfUserId: import_zod_openapi56.z.string(),
+  expiresAt: import_zod_openapi56.z.string()
+});
+var PresenceTokenPayloadSchema = import_zod_openapi56.z.object({
+  userId: import_zod_openapi56.z.string(),
+  pageId: import_zod_openapi56.z.string(),
+  iat: import_zod_openapi56.z.number().int(),
+  exp: import_zod_openapi56.z.number().int()
+});
+var PresenceViewerSchema = import_zod_openapi56.z.object({
+  userId: import_zod_openapi56.z.string(),
+  username: import_zod_openapi56.z.string(),
+  displayName: import_zod_openapi56.z.string(),
+  avatarUrl: import_zod_openapi56.z.string().nullable(),
+  isEditing: import_zod_openapi56.z.boolean(),
+  joinedAt: import_zod_openapi56.z.number().int()
+});
+var PresenceHeartbeatMessageSchema = import_zod_openapi56.z.object({
+  type: import_zod_openapi56.z.literal("heartbeat")
 });
 var PresenceClientMessageSchema = PresenceHeartbeatMessageSchema;
-var PresenceViewersMessageSchema = import_zod_openapi54.z.object({
-  type: import_zod_openapi54.z.literal("viewers"),
-  viewers: import_zod_openapi54.z.array(PresenceViewerSchema),
-  generation: import_zod_openapi54.z.number().int()
-});
-var PresencePageUpdatedMessageSchema = import_zod_openapi54.z.object({
-  type: import_zod_openapi54.z.literal("page-updated"),
-  pageId: import_zod_openapi54.z.string(),
-  revisionId: import_zod_openapi54.z.string(),
-  editorUserId: import_zod_openapi54.z.string(),
-  editorDisplayName: import_zod_openapi54.z.string()
-});
-var PresenceCommentChangedMessageSchema = import_zod_openapi54.z.object({
-  type: import_zod_openapi54.z.literal("comment-changed"),
-  pageId: import_zod_openapi54.z.string(),
-  changeType: import_zod_openapi54.z.enum(["added", "removed"]),
-  commentId: import_zod_openapi54.z.string(),
-  actorUserId: import_zod_openapi54.z.string().optional()
-});
-var PresenceServerMessageSchema = import_zod_openapi54.z.discriminatedUnion("type", [
+var PresenceViewersMessageSchema = import_zod_openapi56.z.object({
+  type: import_zod_openapi56.z.literal("viewers"),
+  viewers: import_zod_openapi56.z.array(PresenceViewerSchema),
+  generation: import_zod_openapi56.z.number().int()
+});
+var PresencePageUpdatedMessageSchema = import_zod_openapi56.z.object({
+  type: import_zod_openapi56.z.literal("page-updated"),
+  pageId: import_zod_openapi56.z.string(),
+  revisionId: import_zod_openapi56.z.string(),
+  editorUserId: import_zod_openapi56.z.string(),
+  editorDisplayName: import_zod_openapi56.z.string()
+});
+var PresenceCommentChangedMessageSchema = import_zod_openapi56.z.object({
+  type: import_zod_openapi56.z.literal("comment-changed"),
+  pageId: import_zod_openapi56.z.string(),
+  changeType: import_zod_openapi56.z.enum(["added", "removed"]),
+  commentId: import_zod_openapi56.z.string(),
+  actorUserId: import_zod_openapi56.z.string().optional()
+});
+var PresenceServerMessageSchema = import_zod_openapi56.z.discriminatedUnion("type", [
   PresenceViewersMessageSchema,
   PresencePageUpdatedMessageSchema,
   PresenceCommentChangedMessageSchema
 ]);
-var LikerSchema = import_zod_openapi54.z.object({
-  id: import_zod_openapi54.z.string(),
-  username: import_zod_openapi54.z.string(),
-  displayName: import_zod_openapi54.z.string(),
-  avatarUrl: import_zod_openapi54.z.string().nullable(),
-  likedAt: import_zod_openapi54.z.string().nullable()
-});
-var LikersResponseSchema = import_zod_openapi54.z.object({
-  users: import_zod_openapi54.z.array(LikerSchema),
-  totalCount: import_zod_openapi54.z.number().int().nonnegative()
-});
-var GetLikersRequestSchema = import_zod_openapi54.z.object({
+var LikerSchema = import_zod_openapi56.z.object({
+  id: import_zod_openapi56.z.string(),
+  username: import_zod_openapi56.z.string(),
+  displayName: import_zod_openapi56.z.string(),
+  avatarUrl: import_zod_openapi56.z.string().nullable(),
+  likedAt: import_zod_openapi56.z.string().nullable()
+});
+var LikersResponseSchema = import_zod_openapi56.z.object({
+  users: import_zod_openapi56.z.array(LikerSchema),
+  totalCount: import_zod_openapi56.z.number().int().nonnegative()
+});
+var GetLikersRequestSchema = import_zod_openapi56.z.object({
   // Optional cap on returned `users`. `totalCount` always reflects the
   // full count regardless of `limit`. Omit for the full list.
-  limit: import_zod_openapi54.z.coerce.number().int().positive().optional()
+  limit: import_zod_openapi56.z.coerce.number().int().positive().optional()
 });
 
 // src/contracts/presence.ts
-var PageIdPathParamsSchema3 = import_zod_openapi55.z.object({
-  id: import_zod_openapi55.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var PageIdPathParamsSchema3 = import_zod_openapi57.z.object({
+  id: import_zod_openapi57.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var getPresenceTokenRoute = (0, import_zod_openapi55.createRoute)({
+var getPresenceTokenRoute = (0, import_zod_openapi57.createRoute)({
   method: "get",
   path: "/pages/{id}/presence-token",
   tags: ["presence"],
@@ -5378,7 +5851,7 @@ var getPresenceTokenRoute = (0, import_zod_openapi55.createRoute)({
     }
   }
 });
-var getLikersRoute = (0, import_zod_openapi55.createRoute)({
+var getLikersRoute = (0, import_zod_openapi57.createRoute)({
   method: "get",
   path: "/pages/{id}/likers",
   tags: ["presence"],
@@ -5417,50 +5890,50 @@ var presenceRoutes = {
 };
 
 // src/contracts/revision.ts
-var import_zod_openapi57 = require("@hono/zod-openapi");
+var import_zod_openapi59 = require("@hono/zod-openapi");
 
 // src/schemas/revision.ts
-var import_zod_openapi56 = require("@hono/zod-openapi");
-var RevisionMetaSchema = import_zod_openapi56.z.object({
-  _id: import_zod_openapi56.z.string(),
-  path: import_zod_openapi56.z.string(),
+var import_zod_openapi58 = require("@hono/zod-openapi");
+var RevisionMetaSchema = import_zod_openapi58.z.object({
+  _id: import_zod_openapi58.z.string(),
+  path: import_zod_openapi58.z.string(),
   author: PageUserSchema.nullable().optional(),
   savedBy: PageUserSchema.nullable().optional(),
-  contributors: import_zod_openapi56.z.array(PageUserSchema).optional(),
+  contributors: import_zod_openapi58.z.array(PageUserSchema).optional(),
   // RFC-0010 — edit channel. `web` (browser / collab editor) vs the API
   // token paths (`oauth` / `pat`). Absent on pre-RFC-0010 revisions. The
   // history UI shows an "app" chip for the token paths.
-  editVia: import_zod_openapi56.z.enum(["web", "oauth", "pat"]).optional(),
-  createdAt: import_zod_openapi56.z.string()
+  editVia: import_zod_openapi58.z.enum(["web", "oauth", "pat"]).optional(),
+  createdAt: import_zod_openapi58.z.string()
 });
-var ListRevisionsRequestSchema = import_zod_openapi56.z.object({
-  limit: import_zod_openapi56.z.coerce.number().int().positive().max(200).optional().default(50),
-  offset: import_zod_openapi56.z.coerce.number().int().min(0).optional().default(0)
+var ListRevisionsRequestSchema = import_zod_openapi58.z.object({
+  limit: import_zod_openapi58.z.coerce.number().int().positive().max(200).optional().default(50),
+  offset: import_zod_openapi58.z.coerce.number().int().min(0).optional().default(0)
 });
-var ListRevisionsResponseSchema = import_zod_openapi56.z.object({
-  revisions: import_zod_openapi56.z.array(RevisionMetaSchema),
+var ListRevisionsResponseSchema = import_zod_openapi58.z.object({
+  revisions: import_zod_openapi58.z.array(RevisionMetaSchema),
   pager: PagerSchema
 });
-var GetRevisionResponseSchema = import_zod_openapi56.z.object({
+var GetRevisionResponseSchema = import_zod_openapi58.z.object({
   revision: RevisionSchema
 });
-var GetRevisionsRequestSchema = import_zod_openapi56.z.object({
-  ids: import_zod_openapi56.z.string().min(1, "ids is required")
+var GetRevisionsRequestSchema = import_zod_openapi58.z.object({
+  ids: import_zod_openapi58.z.string().min(1, "ids is required")
 });
-var GetRevisionsResponseSchema = import_zod_openapi56.z.object({
-  revisions: import_zod_openapi56.z.array(RevisionSchema)
+var GetRevisionsResponseSchema = import_zod_openapi58.z.object({
+  revisions: import_zod_openapi58.z.array(RevisionSchema)
 });
-var RevisionInvalidRequestErrorSchema = import_zod_openapi56.z.object({
-  error: import_zod_openapi56.z.object({
-    code: import_zod_openapi56.z.literal("INVALID_REQUEST"),
-    message: import_zod_openapi56.z.string()
+var RevisionInvalidRequestErrorSchema = import_zod_openapi58.z.object({
+  error: import_zod_openapi58.z.object({
+    code: import_zod_openapi58.z.literal("INVALID_REQUEST"),
+    message: import_zod_openapi58.z.string()
   })
 });
 
 // src/contracts/revision.ts
-var PageIdParamSchema = import_zod_openapi57.z.object({ page_id: import_zod_openapi57.z.string() });
-var RevisionIdParamSchema = import_zod_openapi57.z.object({ id: import_zod_openapi57.z.string() });
-var listRevisionsRoute = (0, import_zod_openapi57.createRoute)({
+var PageIdParamSchema = import_zod_openapi59.z.object({ page_id: import_zod_openapi59.z.string() });
+var RevisionIdParamSchema = import_zod_openapi59.z.object({ id: import_zod_openapi59.z.string() });
+var listRevisionsRoute = (0, import_zod_openapi59.createRoute)({
   method: "get",
   path: "/pages/{page_id}/revisions",
   tags: ["revision"],
@@ -5489,7 +5962,7 @@ var listRevisionsRoute = (0, import_zod_openapi57.createRoute)({
     }
   }
 });
-var getRevisionsRoute = (0, import_zod_openapi57.createRoute)({
+var getRevisionsRoute = (0, import_zod_openapi59.createRoute)({
   method: "get",
   path: "/pages/revisions",
   tags: ["revision"],
@@ -5517,7 +5990,7 @@ var getRevisionsRoute = (0, import_zod_openapi57.createRoute)({
     }
   }
 });
-var getRevisionRoute = (0, import_zod_openapi57.createRoute)({
+var getRevisionRoute = (0, import_zod_openapi59.createRoute)({
   method: "get",
   path: "/pages/revisions/{id}",
   tags: ["revision"],
@@ -5528,7 +6001,7 @@ var getRevisionRoute = (0, import_zod_openapi57.createRoute)({
   },
   responses: {
     200: {
-      description: "Full revision document",
+      description: "Full revision document. `renderedAst` shape is content-negotiated via the `X-Crowi-Ast-Version` request header (RFC-0023): requests declaring `X-Crowi-Ast-Version: 1` receive the typed `{astVersion, root}` envelope; all other requests receive the stored bare mdast Root verbatim. The response varies on this header (`Vary: X-Crowi-Ast-Version`).",
       content: { "application/json": { schema: GetRevisionResponseSchema } }
     },
     400: {
@@ -5555,39 +6028,39 @@ var revisionRoutes = {
 };
 
 // src/contracts/admin-crypto.ts
-var import_zod_openapi59 = require("@hono/zod-openapi");
+var import_zod_openapi61 = require("@hono/zod-openapi");
 
 // src/schemas/admin-crypto.ts
-var import_zod_openapi58 = require("@hono/zod-openapi");
-var SensitiveConfigEntrySchema = import_zod_openapi58.z.object({
-  ns: import_zod_openapi58.z.string(),
-  key: import_zod_openapi58.z.string(),
-  present: import_zod_openapi58.z.boolean(),
-  encrypted: import_zod_openapi58.z.boolean()
+var import_zod_openapi60 = require("@hono/zod-openapi");
+var SensitiveConfigEntrySchema = import_zod_openapi60.z.object({
+  ns: import_zod_openapi60.z.string(),
+  key: import_zod_openapi60.z.string(),
+  present: import_zod_openapi60.z.boolean(),
+  encrypted: import_zod_openapi60.z.boolean()
 });
-var CryptoStatusResponseSchema = import_zod_openapi58.z.object({
+var CryptoStatusResponseSchema = import_zod_openapi60.z.object({
   /** False when CROWI_ENCRYPTION_KEY is not configured — UI shows a setup hint. */
-  encryptionConfigured: import_zod_openapi58.z.boolean(),
-  unencryptedCount: import_zod_openapi58.z.number().int().min(0),
-  encryptedCount: import_zod_openapi58.z.number().int().min(0),
-  entries: import_zod_openapi58.z.array(SensitiveConfigEntrySchema)
+  encryptionConfigured: import_zod_openapi60.z.boolean(),
+  unencryptedCount: import_zod_openapi60.z.number().int().min(0),
+  encryptedCount: import_zod_openapi60.z.number().int().min(0),
+  entries: import_zod_openapi60.z.array(SensitiveConfigEntrySchema)
 });
-var ReencryptResponseSchema = import_zod_openapi58.z.object({
-  rewritten: import_zod_openapi58.z.number().int().min(0),
+var ReencryptResponseSchema = import_zod_openapi60.z.object({
+  rewritten: import_zod_openapi60.z.number().int().min(0),
   /** Already encrypted, skipped on this run. */
-  alreadyEncrypted: import_zod_openapi58.z.number().int().min(0),
+  alreadyEncrypted: import_zod_openapi60.z.number().int().min(0),
   /** Sensitive registry entries that had no row in the DB at all. */
-  missing: import_zod_openapi58.z.number().int().min(0)
+  missing: import_zod_openapi60.z.number().int().min(0)
 });
-var EncryptionNotConfiguredErrorSchema = import_zod_openapi58.z.object({
-  error: import_zod_openapi58.z.object({
-    code: import_zod_openapi58.z.literal("ENCRYPTION_NOT_CONFIGURED"),
-    message: import_zod_openapi58.z.string()
+var EncryptionNotConfiguredErrorSchema = import_zod_openapi60.z.object({
+  error: import_zod_openapi60.z.object({
+    code: import_zod_openapi60.z.literal("ENCRYPTION_NOT_CONFIGURED"),
+    message: import_zod_openapi60.z.string()
   })
 });
 
 // src/contracts/admin-crypto.ts
-var getCryptoStatusRoute = (0, import_zod_openapi59.createRoute)({
+var getCryptoStatusRoute = (0, import_zod_openapi61.createRoute)({
   method: "get",
   path: "/admin/crypto/status",
   tags: ["adminCrypto"],
@@ -5612,7 +6085,7 @@ var getCryptoStatusRoute = (0, import_zod_openapi59.createRoute)({
     }
   }
 });
-var reencryptAllRoute = (0, import_zod_openapi59.createRoute)({
+var reencryptAllRoute = (0, import_zod_openapi61.createRoute)({
   method: "post",
   path: "/admin/crypto/reencrypt",
   tags: ["adminCrypto"],
@@ -5647,37 +6120,37 @@ var adminCryptoRoutes = {
 };
 
 // src/contracts/search.ts
-var import_zod_openapi61 = require("@hono/zod-openapi");
+var import_zod_openapi63 = require("@hono/zod-openapi");
 
 // src/schemas/search.ts
-var import_zod_openapi60 = require("@hono/zod-openapi");
-var SearchPageTypeSchema = import_zod_openapi60.z.enum(["portal", "public", "user"]);
-var SearchPagesRequestSchema = import_zod_openapi60.z.object({
-  q: import_zod_openapi60.z.string().min(1),
-  tree: import_zod_openapi60.z.string().optional(),
+var import_zod_openapi62 = require("@hono/zod-openapi");
+var SearchPageTypeSchema = import_zod_openapi62.z.enum(["portal", "public", "user"]);
+var SearchPagesRequestSchema = import_zod_openapi62.z.object({
+  q: import_zod_openapi62.z.string().min(1),
+  tree: import_zod_openapi62.z.string().optional(),
   type: SearchPageTypeSchema.optional(),
-  page: import_zod_openapi60.z.coerce.number().int().min(1).default(1),
-  limit: import_zod_openapi60.z.coerce.number().int().min(1).max(100).default(50)
-});
-var SearchHitSchema = import_zod_openapi60.z.object({
-  pageId: import_zod_openapi60.z.string(),
-  path: import_zod_openapi60.z.string(),
-  score: import_zod_openapi60.z.number().optional(),
-  snippet: import_zod_openapi60.z.string().optional(),
-  bookmarkCount: import_zod_openapi60.z.number(),
+  page: import_zod_openapi62.z.coerce.number().int().min(1).default(1),
+  limit: import_zod_openapi62.z.coerce.number().int().min(1).max(100).default(50)
+});
+var SearchHitSchema = import_zod_openapi62.z.object({
+  pageId: import_zod_openapi62.z.string(),
+  path: import_zod_openapi62.z.string(),
+  score: import_zod_openapi62.z.number().optional(),
+  snippet: import_zod_openapi62.z.string().optional(),
+  bookmarkCount: import_zod_openapi62.z.number(),
   page: PageSchema
 });
-var SearchPagesResponseSchema = import_zod_openapi60.z.object({
-  meta: import_zod_openapi60.z.object({
-    took: import_zod_openapi60.z.number().optional(),
-    total: import_zod_openapi60.z.number(),
-    results: import_zod_openapi60.z.number()
+var SearchPagesResponseSchema = import_zod_openapi62.z.object({
+  meta: import_zod_openapi62.z.object({
+    took: import_zod_openapi62.z.number().optional(),
+    total: import_zod_openapi62.z.number(),
+    results: import_zod_openapi62.z.number()
   }),
-  data: import_zod_openapi60.z.array(SearchHitSchema)
+  data: import_zod_openapi62.z.array(SearchHitSchema)
 });
 
 // src/contracts/search.ts
-var searchPagesRoute = (0, import_zod_openapi61.createRoute)({
+var searchPagesRoute = (0, import_zod_openapi63.createRoute)({
   method: "get",
   path: "/search",
   tags: ["search"],
@@ -5714,56 +6187,56 @@ var searchRoutes = {
 };
 
 // src/contracts/token-auth.ts
-var import_zod_openapi63 = require("@hono/zod-openapi");
+var import_zod_openapi65 = require("@hono/zod-openapi");
 
 // src/schemas/auth.ts
-var import_zod_openapi62 = require("@hono/zod-openapi");
-var TokenAuthLoginRequestSchema = import_zod_openapi62.z.object({
-  email: import_zod_openapi62.z.string().email(),
-  password: import_zod_openapi62.z.string().min(6)
-});
-var TokenAuthResponseSchema = import_zod_openapi62.z.object({
-  accessToken: import_zod_openapi62.z.string(),
-  refreshToken: import_zod_openapi62.z.string(),
-  expiresIn: import_zod_openapi62.z.number(),
+var import_zod_openapi64 = require("@hono/zod-openapi");
+var TokenAuthLoginRequestSchema = import_zod_openapi64.z.object({
+  email: import_zod_openapi64.z.string().email(),
+  password: import_zod_openapi64.z.string().min(6)
+});
+var TokenAuthResponseSchema = import_zod_openapi64.z.object({
+  accessToken: import_zod_openapi64.z.string(),
+  refreshToken: import_zod_openapi64.z.string(),
+  expiresIn: import_zod_openapi64.z.number(),
   // seconds until expiration
-  user: import_zod_openapi62.z.object({
-    id: import_zod_openapi62.z.string(),
-    username: import_zod_openapi62.z.string(),
-    email: import_zod_openapi62.z.string().email(),
-    name: import_zod_openapi62.z.string(),
-    image: import_zod_openapi62.z.string().optional(),
-    admin: import_zod_openapi62.z.boolean().optional()
+  user: import_zod_openapi64.z.object({
+    id: import_zod_openapi64.z.string(),
+    username: import_zod_openapi64.z.string(),
+    email: import_zod_openapi64.z.string().email(),
+    name: import_zod_openapi64.z.string(),
+    image: import_zod_openapi64.z.string().optional(),
+    admin: import_zod_openapi64.z.boolean().optional()
   })
 });
-var RefreshTokenRequestSchema = import_zod_openapi62.z.object({
-  refreshToken: import_zod_openapi62.z.string()
+var RefreshTokenRequestSchema = import_zod_openapi64.z.object({
+  refreshToken: import_zod_openapi64.z.string()
 });
-var TokenAuthRegisterRequestSchema = import_zod_openapi62.z.object({
-  username: import_zod_openapi62.z.string(),
-  name: import_zod_openapi62.z.string(),
-  email: import_zod_openapi62.z.string().email(),
-  password: import_zod_openapi62.z.string().min(6)
+var TokenAuthRegisterRequestSchema = import_zod_openapi64.z.object({
+  username: UsernameSchema,
+  name: import_zod_openapi64.z.string(),
+  email: import_zod_openapi64.z.string().email(),
+  password: import_zod_openapi64.z.string().min(6)
 });
-var RegisterPendingResponseSchema = import_zod_openapi62.z.object({
-  status: import_zod_openapi62.z.enum(["confirmation_required", "approval_required"])
+var RegisterPendingResponseSchema = import_zod_openapi64.z.object({
+  status: import_zod_openapi64.z.enum(["confirmation_required", "approval_required"])
 });
 
 // src/contracts/token-auth.ts
-var TokenLogoutResponseSchema = import_zod_openapi63.z.object({ message: import_zod_openapi63.z.string() });
-var TokenMeResponseSchema = import_zod_openapi63.z.object({
-  user: import_zod_openapi63.z.object({
-    id: import_zod_openapi63.z.string(),
-    username: import_zod_openapi63.z.string(),
-    email: import_zod_openapi63.z.string().email(),
-    name: import_zod_openapi63.z.string(),
-    image: import_zod_openapi63.z.string().optional(),
-    status: import_zod_openapi63.z.number(),
-    admin: import_zod_openapi63.z.boolean().optional(),
-    createdAt: import_zod_openapi63.z.string()
+var TokenLogoutResponseSchema = import_zod_openapi65.z.object({ message: import_zod_openapi65.z.string() });
+var TokenMeResponseSchema = import_zod_openapi65.z.object({
+  user: import_zod_openapi65.z.object({
+    id: import_zod_openapi65.z.string(),
+    username: import_zod_openapi65.z.string(),
+    email: import_zod_openapi65.z.string().email(),
+    name: import_zod_openapi65.z.string(),
+    image: import_zod_openapi65.z.string().optional(),
+    status: import_zod_openapi65.z.number(),
+    admin: import_zod_openapi65.z.boolean().optional(),
+    createdAt: import_zod_openapi65.z.string()
   })
 });
-var tokenLoginRoute = (0, import_zod_openapi63.createRoute)({
+var tokenLoginRoute = (0, import_zod_openapi65.createRoute)({
   method: "post",
   path: "/auth/login",
   tags: ["tokenAuth"],
@@ -5800,7 +6273,7 @@ var tokenLoginRoute = (0, import_zod_openapi63.createRoute)({
     }
   }
 });
-var tokenRegisterRoute = (0, import_zod_openapi63.createRoute)({
+var tokenRegisterRoute = (0, import_zod_openapi65.createRoute)({
   method: "post",
   path: "/auth/register",
   tags: ["tokenAuth"],
@@ -5841,7 +6314,7 @@ var tokenRegisterRoute = (0, import_zod_openapi63.createRoute)({
     }
   }
 });
-var tokenRefreshRoute = (0, import_zod_openapi63.createRoute)({
+var tokenRefreshRoute = (0, import_zod_openapi65.createRoute)({
   method: "post",
   path: "/auth/refresh",
   tags: ["tokenAuth"],
@@ -5878,7 +6351,7 @@ var tokenRefreshRoute = (0, import_zod_openapi63.createRoute)({
     }
   }
 });
-var tokenLogoutRoute = (0, import_zod_openapi63.createRoute)({
+var tokenLogoutRoute = (0, import_zod_openapi65.createRoute)({
   method: "post",
   path: "/auth/logout",
   tags: ["tokenAuth"],
@@ -5888,7 +6361,7 @@ var tokenLogoutRoute = (0, import_zod_openapi63.createRoute)({
     body: {
       content: {
         "application/json": {
-          schema: import_zod_openapi63.z.object({ refreshToken: import_zod_openapi63.z.string().optional() })
+          schema: import_zod_openapi65.z.object({ refreshToken: import_zod_openapi65.z.string().optional() })
         }
       }
     }
@@ -5908,7 +6381,7 @@ var tokenLogoutRoute = (0, import_zod_openapi63.createRoute)({
     }
   }
 });
-var tokenMeRoute = (0, import_zod_openapi63.createRoute)({
+var tokenMeRoute = (0, import_zod_openapi65.createRoute)({
   method: "get",
   path: "/auth/me",
   tags: ["tokenAuth"],
@@ -5938,22 +6411,22 @@ var tokenAuthRoutes = {
 };
 
 // src/contracts/invite-accept.ts
-var import_zod_openapi65 = require("@hono/zod-openapi");
+var import_zod_openapi67 = require("@hono/zod-openapi");
 
 // src/schemas/invite-accept.ts
-var import_zod_openapi64 = require("@hono/zod-openapi");
-var InviteAcceptRequestSchema = import_zod_openapi64.z.object({
-  token: import_zod_openapi64.z.string(),
-  username: import_zod_openapi64.z.string().min(1),
-  name: import_zod_openapi64.z.string().min(1),
-  password: import_zod_openapi64.z.string().min(6)
+var import_zod_openapi66 = require("@hono/zod-openapi");
+var InviteAcceptRequestSchema = import_zod_openapi66.z.object({
+  token: import_zod_openapi66.z.string(),
+  username: UsernameSchema,
+  name: import_zod_openapi66.z.string().min(1),
+  password: import_zod_openapi66.z.string().min(6)
 });
-var InvitePreviewResponseSchema = import_zod_openapi64.z.object({
-  email: import_zod_openapi64.z.string().email()
+var InvitePreviewResponseSchema = import_zod_openapi66.z.object({
+  email: import_zod_openapi66.z.string().email()
 });
 
 // src/contracts/invite-accept.ts
-var invitePreviewRoute = (0, import_zod_openapi65.createRoute)({
+var invitePreviewRoute = (0, import_zod_openapi67.createRoute)({
   method: "get",
   path: "/invite/accept",
   tags: ["inviteAccept"],
@@ -5980,7 +6453,7 @@ var invitePreviewRoute = (0, import_zod_openapi65.createRoute)({
     }
   }
 });
-var acceptInviteRoute = (0, import_zod_openapi65.createRoute)({
+var acceptInviteRoute = (0, import_zod_openapi67.createRoute)({
   method: "post",
   path: "/invite/accept",
   tags: ["inviteAccept"],
@@ -6023,23 +6496,23 @@ var inviteAcceptRoutes = {
 };
 
 // src/contracts/password-reset.ts
-var import_zod_openapi67 = require("@hono/zod-openapi");
+var import_zod_openapi69 = require("@hono/zod-openapi");
 
 // src/schemas/password-reset.ts
-var import_zod_openapi66 = require("@hono/zod-openapi");
-var ForgotPasswordRequestSchema = import_zod_openapi66.z.object({
-  email: import_zod_openapi66.z.string().email()
+var import_zod_openapi68 = require("@hono/zod-openapi");
+var ForgotPasswordRequestSchema = import_zod_openapi68.z.object({
+  email: import_zod_openapi68.z.string().email()
 });
-var ForgotPasswordResponseSchema = import_zod_openapi66.z.object({
-  ok: import_zod_openapi66.z.literal(true)
+var ForgotPasswordResponseSchema = import_zod_openapi68.z.object({
+  ok: import_zod_openapi68.z.literal(true)
 });
-var ResetPasswordRequestSchema = import_zod_openapi66.z.object({
-  token: import_zod_openapi66.z.string(),
-  password: import_zod_openapi66.z.string().min(6)
+var ResetPasswordRequestSchema = import_zod_openapi68.z.object({
+  token: import_zod_openapi68.z.string(),
+  password: import_zod_openapi68.z.string().min(6)
 });
 
 // src/contracts/password-reset.ts
-var forgotPasswordRoute = (0, import_zod_openapi67.createRoute)({
+var forgotPasswordRoute = (0, import_zod_openapi69.createRoute)({
   method: "post",
   path: "/auth/forgot-password",
   tags: ["passwordReset"],
@@ -6064,7 +6537,7 @@ var forgotPasswordRoute = (0, import_zod_openapi67.createRoute)({
     }
   }
 });
-var validateResetTokenRoute = (0, import_zod_openapi67.createRoute)({
+var validateResetTokenRoute = (0, import_zod_openapi69.createRoute)({
   method: "get",
   path: "/auth/reset-password",
   tags: ["passwordReset"],
@@ -6087,7 +6560,7 @@ var validateResetTokenRoute = (0, import_zod_openapi67.createRoute)({
     }
   }
 });
-var selfResetPasswordRoute = (0, import_zod_openapi67.createRoute)({
+var selfResetPasswordRoute = (0, import_zod_openapi69.createRoute)({
   method: "post",
   path: "/auth/reset-password",
   tags: ["passwordReset"],
@@ -6127,19 +6600,19 @@ var passwordResetRoutes = {
 };
 
 // src/contracts/activation.ts
-var import_zod_openapi69 = require("@hono/zod-openapi");
+var import_zod_openapi71 = require("@hono/zod-openapi");
 
 // src/schemas/activation.ts
-var import_zod_openapi68 = require("@hono/zod-openapi");
-var ActivateRequestSchema = import_zod_openapi68.z.object({
-  token: import_zod_openapi68.z.string()
+var import_zod_openapi70 = require("@hono/zod-openapi");
+var ActivateRequestSchema = import_zod_openapi70.z.object({
+  token: import_zod_openapi70.z.string()
 });
-var ActivateValidationResponseSchema = import_zod_openapi68.z.object({
-  ok: import_zod_openapi68.z.literal(true)
+var ActivateValidationResponseSchema = import_zod_openapi70.z.object({
+  ok: import_zod_openapi70.z.literal(true)
 });
 
 // src/contracts/activation.ts
-var validateActivationTokenRoute = (0, import_zod_openapi69.createRoute)({
+var validateActivationTokenRoute = (0, import_zod_openapi71.createRoute)({
   method: "get",
   path: "/auth/activate",
   tags: ["activation"],
@@ -6162,7 +6635,7 @@ var validateActivationTokenRoute = (0, import_zod_openapi69.createRoute)({
     }
   }
 });
-var activateAccountRoute = (0, import_zod_openapi69.createRoute)({
+var activateAccountRoute = (0, import_zod_openapi71.createRoute)({
   method: "post",
   path: "/auth/activate",
   tags: ["activation"],
@@ -6197,21 +6670,21 @@ var activationRoutes = {
 };
 
 // src/contracts/email-change.ts
-var import_zod_openapi71 = require("@hono/zod-openapi");
+var import_zod_openapi73 = require("@hono/zod-openapi");
 
 // src/schemas/email-change.ts
-var import_zod_openapi70 = require("@hono/zod-openapi");
-var ConfirmEmailChangeRequestSchema = import_zod_openapi70.z.object({
-  token: import_zod_openapi70.z.string()
+var import_zod_openapi72 = require("@hono/zod-openapi");
+var ConfirmEmailChangeRequestSchema = import_zod_openapi72.z.object({
+  token: import_zod_openapi72.z.string()
 });
-var ConfirmEmailChangeResponseSchema = import_zod_openapi70.z.object({
-  ok: import_zod_openapi70.z.literal(true),
+var ConfirmEmailChangeResponseSchema = import_zod_openapi72.z.object({
+  ok: import_zod_openapi72.z.literal(true),
   /** The newly-confirmed email address. */
-  email: import_zod_openapi70.z.string().email()
+  email: import_zod_openapi72.z.string().email()
 });
 
 // src/contracts/email-change.ts
-var validateEmailChangeTokenRoute = (0, import_zod_openapi71.createRoute)({
+var validateEmailChangeTokenRoute = (0, import_zod_openapi73.createRoute)({
   method: "get",
   path: "/auth/confirm-email-change",
   tags: ["emailChange"],
@@ -6234,7 +6707,7 @@ var validateEmailChangeTokenRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var confirmEmailChangeRoute = (0, import_zod_openapi71.createRoute)({
+var confirmEmailChangeRoute = (0, import_zod_openapi73.createRoute)({
   method: "post",
   path: "/auth/confirm-email-change",
   tags: ["emailChange"],
@@ -6273,9 +6746,9 @@ var emailChangeRoutes = {
 };
 
 // src/contracts/user.ts
-var import_zod_openapi72 = require("@hono/zod-openapi");
-var UsernameParamSchema = import_zod_openapi72.z.object({ username: import_zod_openapi72.z.string() });
-var getUserPageRoute = (0, import_zod_openapi72.createRoute)({
+var import_zod_openapi74 = require("@hono/zod-openapi");
+var UsernameParamSchema = import_zod_openapi74.z.object({ username: import_zod_openapi74.z.string() });
+var getUserPageRoute = (0, import_zod_openapi74.createRoute)({
   method: "get",
   path: "/user/{username}",
   tags: ["user"],
@@ -6286,7 +6759,7 @@ var getUserPageRoute = (0, import_zod_openapi72.createRoute)({
   },
   responses: {
     200: {
-      description: "User profile with statistics + recent activity",
+      description: "User profile with statistics (createdPagesCount, bookmarksCount, likesCount, commentsCount \u2014 the last two are the target user's OWN likes/comments, not activity their pages received) + recent activity",
       content: { "application/json": { schema: UserPageResponseSchema } }
     },
     401: {
@@ -6303,7 +6776,7 @@ var getUserPageRoute = (0, import_zod_openapi72.createRoute)({
     }
   }
 });
-var getUserBookmarksRoute = (0, import_zod_openapi72.createRoute)({
+var getUserBookmarksRoute = (0, import_zod_openapi74.createRoute)({
   method: "get",
   path: "/user/{username}/bookmarks",
   tags: ["user"],
@@ -6332,7 +6805,7 @@ var getUserBookmarksRoute = (0, import_zod_openapi72.createRoute)({
     }
   }
 });
-var getUserPagesRoute = (0, import_zod_openapi72.createRoute)({
+var getUserPagesRoute = (0, import_zod_openapi74.createRoute)({
   method: "get",
   path: "/user/{username}/pages",
   tags: ["user"],
@@ -6361,7 +6834,7 @@ var getUserPagesRoute = (0, import_zod_openapi72.createRoute)({
     }
   }
 });
-var getUserSubpagesRoute = (0, import_zod_openapi72.createRoute)({
+var getUserSubpagesRoute = (0, import_zod_openapi74.createRoute)({
   method: "get",
   path: "/user/{username}/subpages",
   tags: ["user"],
@@ -6398,7 +6871,7 @@ var getUserSubpagesRoute = (0, import_zod_openapi72.createRoute)({
     }
   }
 });
-var listMembersRoute = (0, import_zod_openapi72.createRoute)({
+var listMembersRoute = (0, import_zod_openapi74.createRoute)({
   method: "get",
   path: "/users",
   tags: ["user"],
@@ -6509,7 +6982,9 @@ var stubUserPublic = {
 var stubUserPage = {
   user: stubUserPublic,
   createdPagesCount: 0,
-  bookmarksCount: 0
+  bookmarksCount: 0,
+  likesCount: 0,
+  commentsCount: 0
 };
 var stubPager = { prev: null, next: null, offset: 0 };
 var stubUserBookmarks = {
@@ -6596,11 +7071,11 @@ var stubPageWithRevision = {
   }
 };
 var stubPageResponse = { page: stubPage };
-var stubListPages = { pages: [], pager: stubPager, portalPage: null };
+var stubListPages = { pages: [], pager: stubPager, portalPage: null, total: 0 };
 var stubListPageChildren = { children: [] };
 var stubSeenUsers = { seenUsers: [], seenUsersCount: 0 };
 var stubWatchStatus = { watching: false };
-var stubPreview = { renderedAst: null };
+var stubPreview = {};
 var stubWsToken = {
   wsToken: "",
   pageId: "",
@@ -6690,8 +7165,9 @@ var stubPendingUsersCount = { count: 0 };
 var stubListPlugins = { plugins: [] };
 var stubPluginConfig = { name: "", fields: [], values: {} };
 var stubUpdatePluginConfig = { ok: true, hotReloaded: false, reconfigureFailed: false };
+var stubPluginReadiness = { issues: [] };
 var stubClearRenderCache = { ok: true, clearedAt: "", removedCount: 0 };
-var appAuthMeUserChain = new import_zod_openapi73.OpenAPIHono().openapi(
+var appAuthMeUserChain = new import_zod_openapi75.OpenAPIHono().openapi(
   appRoutes.getAppInfoRoute,
   (c) => c.json(
     {
@@ -6725,31 +7201,31 @@ var appAuthMeUserChain = new import_zod_openapi73.OpenAPIHono().openapi(
   meRoutes.updatePasswordRoute,
   (c) => c.json({ status: "ok", message: "", accessToken: "", refreshToken: "", expiresIn: 0 }, 200)
 ).openapi(meRoutes.recentlyViewedPagesRoute, (c) => c.json({ pages: [] }, 200)).openapi(accessTokenRoutes.listAccessTokensRoute, (c) => c.json({ accessTokens: [] }, 200)).openapi(accessTokenRoutes.createAccessTokenRoute, (c) => c.json(stubCreateAccessToken, 201)).openapi(accessTokenRoutes.deleteAccessTokenRoute, (c) => c.json(stubAccessToken, 200)).openapi(userRoutes.getUserPageRoute, (c) => c.json(stubUserPage, 200)).openapi(userRoutes.getUserBookmarksRoute, (c) => c.json(stubUserBookmarks, 200)).openapi(userRoutes.getUserPagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.getUserSubpagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.listMembersRoute, (c) => c.json(stubListUsers, 200));
-var bookmarkBacklinkCommentRevisionChain = new import_zod_openapi73.OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
-var pageChain = new import_zod_openapi73.OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.claimPageLinkAccessRoute, (c) => c.json({ ...stubPageWithRevision, granted: false }, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
-var lateContractApp = new import_zod_openapi73.OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
-var adminSettingsContractApp = new import_zod_openapi73.OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
-var adminUsersPluginsContractApp = new import_zod_openapi73.OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
-var oauthContractApp = new import_zod_openapi73.OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200)).openapi(oauthRoutes.clientInfoRoute, (c) => c.json(stubClientInfo, 200));
+var bookmarkBacklinkCommentRevisionChain = new import_zod_openapi75.OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
+var pageChain = new import_zod_openapi75.OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.claimPageLinkAccessRoute, (c) => c.json({ ...stubPageWithRevision, granted: false }, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
+var lateContractApp = new import_zod_openapi75.OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
+var adminSettingsContractApp = new import_zod_openapi75.OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
+var adminUsersPluginsContractApp = new import_zod_openapi75.OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.getPluginReadinessRoute, (c) => c.json(stubPluginReadiness, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
+var oauthContractApp = new import_zod_openapi75.OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200)).openapi(oauthRoutes.clientInfoRoute, (c) => c.json(stubClientInfo, 200));
 var createClient = (baseUrl, options = {}) => (0, import_client.hc)(baseUrl, {
   headers: options.headers,
   fetch: options.fetch
 });
 
 // src/schemas/mail-token.ts
-var import_zod_openapi74 = require("@hono/zod-openapi");
-var MailTokenPurposeSchema = import_zod_openapi74.z.enum(["invite", "activate", "reset", "email-change"]);
-var MailTokenPayloadSchema = import_zod_openapi74.z.object({
+var import_zod_openapi76 = require("@hono/zod-openapi");
+var MailTokenPurposeSchema = import_zod_openapi76.z.enum(["invite", "activate", "reset", "email-change"]);
+var MailTokenPayloadSchema = import_zod_openapi76.z.object({
   purpose: MailTokenPurposeSchema,
-  userId: import_zod_openapi74.z.string(),
+  userId: import_zod_openapi76.z.string(),
   /** Target address. For `email-change` this is the NEW address. */
-  email: import_zod_openapi74.z.string().email(),
+  email: import_zod_openapi76.z.string().email(),
   /**
    * For `email-change`: the account's email at issue time. The confirm
    * endpoint rejects the token unless it still matches, making the token
    * single-use (a stale token cannot revert a later change).
    */
-  fromEmail: import_zod_openapi74.z.string().email().optional(),
+  fromEmail: import_zod_openapi76.z.string().email().optional(),
   /**
    * For `reset`: the account's `passwordResetGeneration` at issue time.
    * Consuming the link increments that counter, so the token only matches
@@ -6758,7 +7234,7 @@ var MailTokenPayloadSchema = import_zod_openapi74.z.object({
    * schema because the other purposes don't carry it (and links minted
    * before the claim existed simply no longer match).
    */
-  resetGeneration: import_zod_openapi74.z.number().int().nonnegative().optional(),
+  resetGeneration: import_zod_openapi76.z.number().int().nonnegative().optional(),
   /**
    * For `email-change`: the account's `authVersion` at issue time. The
    * confirm endpoint requires it to still match, so a pending address change
@@ -6770,10 +7246,22 @@ var MailTokenPayloadSchema = import_zod_openapi74.z.object({
    * semantics wanted are exactly "the session that asked for this is gone",
    * and that is what every bump of it already means.
    */
-  authVersion: import_zod_openapi74.z.number().int().nonnegative().optional(),
+  authVersion: import_zod_openapi76.z.number().int().nonnegative().optional(),
+  /**
+   * For `email-change`: the account's `emailChangeGeneration` at issue time.
+   * Requesting a change increments it, so asking for a different address
+   * supersedes any link still pending — which is what lets a user call off a
+   * change they did not want (one an attacker started with a stolen session,
+   * or one sent to a mistyped address). `authVersion` cannot serve this: it
+   * means "the session that asked is gone", and bumping it on a mere request
+   * would log the user out of their own account for editing their profile.
+   * Optional in the schema for the same reason as the others — links minted
+   * before the claim existed simply no longer match.
+   */
+  emailChangeGeneration: import_zod_openapi76.z.number().int().nonnegative().optional(),
   // iat / exp are injected and verified by the JWT layer.
-  iat: import_zod_openapi74.z.number().optional(),
-  exp: import_zod_openapi74.z.number().optional()
+  iat: import_zod_openapi76.z.number().optional(),
+  exp: import_zod_openapi76.z.number().optional()
 });
 
 // src/util/html-elements.ts
@@ -6934,6 +7422,13 @@ var WS_CLOSE_CODES = {
   ALL_CAPABILITIES,
   ALL_SCOPES,
   API_SURFACE_VERSION,
+  AST_INPUT_LIMIT_BYTES,
+  AST_MAX_HAST_DEPTH,
+  AST_MAX_IMAGE_BASE64_CHARS,
+  AST_MAX_TREE_DEPTH,
+  AST_MAX_VALUE_CHARS,
+  AST_OUTPUT_BUDGET_BYTES,
+  AST_OUTPUT_WARN_BYTES,
   AccessTokenSchema,
   ActivateRequestSchema,
   ActivateValidationResponseSchema,
@@ -6970,6 +7465,7 @@ var WS_CLOSE_CODES = {
   BacklinkSchema,
   BookmarkResponseSchema,
   BookmarkSchema,
+  CURRENT_AST_VERSION,
   CapabilitySchema,
   ClaimPageLinkAccessResponseSchema,
   ClearRenderCacheResponseSchema,
@@ -6992,10 +7488,21 @@ var WS_CLOSE_CODES = {
   CreateDraftRequestSchema,
   CreateDraftResponseSchema,
   CreatePageRequestSchema,
+  CrowiCodeSidecarSchema,
+  CrowiDiagramNodeSchema,
+  CrowiDiagramSidecarSchema,
+  CrowiDimensionSchema,
+  CrowiImagePayloadSchema,
+  CrowiLinkCardNodeSchema,
+  CrowiLinkCardSidecarSchema,
+  CrowiMathSidecarSchema,
+  CrowiOpaqueNodeSchema,
+  CrowiPlaceholderKindSchema,
+  CrowiPlaceholderNodeSchema,
+  CrowiPlaceholderSidecarSchema,
   CryptoStatusResponseSchema,
   DEVICE_CODE_GRANT_TYPE,
   DISCOVERY_SCOPES_SUPPORTED,
-  DND_EXTRA_UPLOAD_MIME,
   DYNAMIC_CAPABILITIES,
   DeleteAdminUserResponseSchema,
   DeleteCommentRequestSchema,
@@ -7036,7 +7543,11 @@ var WS_CLOSE_CODES = {
   GetSeenUsersRequestSchema,
   GetStorageStatusResponseSchema,
   GetWatchStatusRequestSchema,
-  IMAGE_UPLOAD_MIME,
+  HChildSchema,
+  HChildrenSchema,
+  HNameSchema,
+  HPropertiesSchema,
+  HastHintDataSchema,
   ISSUABLE_SCOPES,
   InstallerStatusResponseSchema,
   InsufficientScopeErrorSchema,
@@ -7071,6 +7582,7 @@ var WS_CLOSE_CODES = {
   ListRevisionsResponseSchema,
   ListUsersRequestSchema,
   ListUsersResponseSchema,
+  LooseRenderedAstRootSchema,
   MailSettingsValidationErrorSchema,
   MailTokenPayloadSchema,
   MailTokenPurposeSchema,
@@ -7122,6 +7634,9 @@ var WS_CLOSE_CODES = {
   PluginFieldSchema,
   PluginInfoSchema,
   PluginNotFoundErrorSchema,
+  PluginReadinessFieldSchema,
+  PluginReadinessIssueSchema,
+  PluginReadinessResponseSchema,
   PresenceClientMessageSchema,
   PresenceCommentChangedMessageSchema,
   PresenceHeartbeatMessageSchema,
@@ -7134,6 +7649,7 @@ var WS_CLOSE_CODES = {
   PreviewPageRequestSchema,
   PreviewPageResponseSchema,
   ProfileErrorResponseSchema,
+  RENDERED_AST_NODE_DEFS,
   RecentlyViewedPagesResponseSchema,
   ReencryptResponseSchema,
   RefreshTokenRequestSchema,
@@ -7147,6 +7663,13 @@ var WS_CLOSE_CODES = {
   RenameSubtreeRequestSchema,
   RenameSubtreeResponseSchema,
   RenameTreeErrorSchema,
+  RenderedAstArtifactKeySchema,
+  RenderedAstEnvelopeOpenApiSchema,
+  RenderedAstEnvelopeSchema,
+  RenderedAstNodeSchema,
+  RenderedAstRootSchema,
+  RenderedAstValueSchema,
+  ReservationSchema,
   ResetPasswordRequestSchema,
   ResetPasswordResponseSchema,
   RevertToRevisionRequestSchema,
@@ -7158,6 +7681,7 @@ var WS_CLOSE_CODES = {
   RevokeRequestSchema,
   RevokeResponseSchema,
   SCOPES,
+  SIDECAR_KEYS,
   STATIC_CAPABILITIES,
   STRIP_KNOWN_HTML_TAGS_MAX_LENGTH,
   SearchAdminUsersByEmailRequestSchema,
@@ -7177,6 +7701,9 @@ var WS_CLOSE_CODES = {
   ServiceUnavailableErrorSchema,
   SetPageGrantRequestSchema,
   SetWatchStatusRequestSchema,
+  ShikiTokenLinesSchema,
+  ShikiTokenSchema,
+  ShikiTokenStyleSchema,
   StorageDriverEntrySchema,
   SuccessResponseSchema,
   ThemeSchema,
@@ -7189,6 +7716,7 @@ var WS_CLOSE_CODES = {
   TokenAuthResponseSchema,
   TokenRequestSchema,
   TokenResponseSchema,
+  UPLOAD_ALLOWED_MIME,
   UpdateAdminUserEmailRequestSchema,
   UpdateAppSettingsRequestSchema,
   UpdateAppSettingsResponseSchema,
@@ -7220,6 +7748,7 @@ var WS_CLOSE_CODES = {
   UserStatusErrorSchema,
   UserStatusSchema,
   UserSubpagesRequestSchema,
+  UsernameSchema,
   ValidationErrorSchema,
   WS_CLOSE_CODES,
   WatchStatusResponseSchema,
@@ -7290,6 +7819,7 @@ var WS_CLOSE_CODES = {
   getNotificationsTokenRoute,
   getPageRoute,
   getPluginConfigRoute,
+  getPluginReadinessRoute,
   getPresenceTokenRoute,
   getProfileRoute,
   getRevisionRoute,
@@ -7370,6 +7900,7 @@ var WS_CLOSE_CODES = {
   tokenRegisterRoute,
   tokenRoute,
   unlikePageRoute,
+  unwrapRenderedAst,
   updateAppSettingsRoute,
   updateAuthSettingsRoute,
   updateMailSettingsRoute,