@crowi/api-contract 2.0.0-alpha.13 → 2.0.0-alpha.14

package/dist/index.mjs

@@ -1814,6 +1814,17 @@ var UPLOAD_ALLOWED_MIME = [
   // Unknown / unset — see the note above.
   "application/octet-stream"
 ];
+var UploadPolicyResponseSchema = z17.object({
+  allowedMimeTypes: z17.array(z17.string()),
+  extensionHints: z17.record(z17.string(), z17.string()),
+  maxBytes: z17.object({
+    attachment: z17.number()
+  }),
+  profilePicture: z17.object({
+    allowedMimeTypes: z17.array(z17.string()),
+    maxBytes: z17.number()
+  })
+});
 
 // src/contracts/attachment.ts
 var PageIdPathParamsSchema = z18.object({
@@ -1827,8 +1838,7 @@ var AddAttachmentBodySchema = z18.object({
 });
 var UploadAttachmentBodySchema = z18.object({
   file: z18.any().openapi({ type: "string", format: "binary" }).optional(),
-  pageId: z18.string().optional(),
-  intent: z18.string().optional().openapi({ enum: ["paste", "dnd"] })
+  pageId: z18.string().optional()
 });
 var listAttachmentsRoute = createRoute10({
   method: "get",
@@ -1998,7 +2008,7 @@ var uploadAttachmentRoute = createRoute10({
       content: { "application/json": { schema: UploadAttachmentErrorSchema } }
     },
     413: {
-      description: "Body exceeds the per-intent size cap",
+      description: "Body exceeds the unified upload size cap",
       content: { "application/json": { schema: UploadAttachmentErrorSchema } }
     },
     415: {
@@ -2051,6 +2061,23 @@ var removeAttachmentRoute = createRoute10({
     }
   }
 });
+var getUploadPolicyRoute = createRoute10({
+  method: "get",
+  path: "/attachments/upload-policy",
+  tags: ["attachment"],
+  security: [{ bearerAuth: [] }],
+  summary: "Get the server upload policy (allowed MIME types, extension hints, size limits)",
+  responses: {
+    200: {
+      description: "Current upload policy, derived from server-side constants (never a value maintained separately)",
+      content: { "application/json": { schema: UploadPolicyResponseSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    }
+  }
+});
 var attachmentRoutes = {
   // `/pages/{pageId}/attachments/usage` MUST register before
   // `/pages/{pageId}/attachments` so the literal `/usage` suffix wins;
@@ -2062,7 +2089,8 @@ var attachmentRoutes = {
   addAttachmentRoute,
   uploadAttachmentRoute,
   getAttachmentMetaRoute,
-  removeAttachmentRoute
+  removeAttachmentRoute,
+  getUploadPolicyRoute
 };
 
 // src/contracts/autocomplete.ts
@@ -2414,6 +2442,17 @@ var crowiOpaqueFields = z22.object({
   /** Best-effort diagnostics only — never a rendering hint. Truncated to 64 chars before assignment. */
   originalType: z22.string().max(64).optional()
 });
+var FRONTMATTER_MAX_ENTRIES = 50;
+var FRONTMATTER_MAX_KEY_CHARS = 100;
+var FRONTMATTER_MAX_VALUE_CHARS = 300;
+var FRONTMATTER_MAX_RAW_BYTES = 8 * 1024;
+var CrowiFrontmatterEntrySchema = z22.object({
+  key: z22.string().max(FRONTMATTER_MAX_KEY_CHARS),
+  value: z22.string().max(FRONTMATTER_MAX_VALUE_CHARS)
+});
+var crowiFrontmatterFields = z22.object({
+  entries: z22.array(CrowiFrontmatterEntrySchema).max(FRONTMATTER_MAX_ENTRIES)
+});
 var RENDERED_AST_NODE_DEFS = {
   root: { placement: "flow", childModel: "flow", fields: noFields },
   paragraph: { placement: "flow", childModel: "phrasing", fields: noFields },
@@ -2442,10 +2481,12 @@ var RENDERED_AST_NODE_DEFS = {
   footnoteReference: { placement: "phrasing", childModel: "none", fields: footnoteReferenceFields },
   linkReference: { placement: "phrasing", childModel: "phrasing", fields: linkReferenceFields },
   imageReference: { placement: "phrasing", childModel: "none", fields: imageReferenceFields },
-  // Crowi-owned types. `crowiFigure` is the only one that also appears
-  // in stored ASTs; the other three only exist as projection outputs
-  // (or as defensively-validated plugin-injected nodes).
+  // Crowi-owned types. `crowiFigure` / `crowiFrontmatter` are the only
+  // ones that also appear in stored ASTs directly (a core transform
+  // writes them at save time); the other three only exist as projection
+  // outputs (or as defensively-validated plugin-injected nodes).
   crowiFigure: { placement: "flow", childModel: "phrasing", fields: noFields },
+  crowiFrontmatter: { placement: "flow", childModel: "none", fields: crowiFrontmatterFields },
   crowiDiagram: { placement: "flow", childModel: "none", fields: CrowiDiagramSidecarSchema },
   crowiLinkCard: { placement: "flow", childModel: "none", fields: CrowiLinkCardSidecarSchema },
   crowiPlaceholder: { placement: "both", childModel: "none", fields: CrowiPlaceholderSidecarSchema },
@@ -2481,6 +2522,7 @@ var RenderedAstNodeSchema = z22.lazy(
     LinkReferenceNodeSchema,
     ImageReferenceNodeSchema,
     CrowiFigureNodeSchema,
+    CrowiFrontmatterNodeSchema,
     CrowiDiagramNodeSchema,
     CrowiLinkCardNodeSchema,
     CrowiPlaceholderNodeSchema,
@@ -2529,6 +2571,7 @@ var CrowiFigureNodeSchema = z22.object({
   data: HastHintDataSchema.extend({ hName: z22.literal("figure"), hProperties: HPropertiesSchema }),
   children: childrenSchema
 });
+var CrowiFrontmatterNodeSchema = crowiFrontmatterFields.extend({ type: z22.literal("crowiFrontmatter"), data: dataSchema });
 var CrowiDiagramNodeSchema = CrowiDiagramSidecarSchema.extend({ type: z22.literal("crowiDiagram"), data: dataSchema });
 var CrowiLinkCardNodeSchema = CrowiLinkCardSidecarSchema.extend({ type: z22.literal("crowiLinkCard"), data: dataSchema });
 var CrowiPlaceholderNodeSchema = CrowiPlaceholderSidecarSchema.extend({ type: z22.literal("crowiPlaceholder"), data: dataSchema });
@@ -7007,6 +7050,12 @@ var stubAttachmentMeta = (() => {
 })();
 var stubUploadAttachment = { url: "", filename: "", mimeType: "", sizeBytes: 0 };
 var stubRemoveAttachment = { success: true };
+var stubUploadPolicy = {
+  allowedMimeTypes: [],
+  extensionHints: {},
+  maxBytes: { attachment: 0 },
+  profilePicture: { allowedMimeTypes: [], maxBytes: 0 }
+};
 var stubSearchPages = { meta: { total: 0, results: 0 }, data: [] };
 var stubCryptoStatus = {
   encryptionConfigured: false,
@@ -7095,7 +7144,7 @@ var appAuthMeUserChain = new OpenAPIHono().openapi(
 ).openapi(meRoutes.recentlyViewedPagesRoute, (c) => c.json({ pages: [] }, 200)).openapi(accessTokenRoutes.listAccessTokensRoute, (c) => c.json({ accessTokens: [] }, 200)).openapi(accessTokenRoutes.createAccessTokenRoute, (c) => c.json(stubCreateAccessToken, 201)).openapi(accessTokenRoutes.deleteAccessTokenRoute, (c) => c.json(stubAccessToken, 200)).openapi(userRoutes.getUserPageRoute, (c) => c.json(stubUserPage, 200)).openapi(userRoutes.getUserBookmarksRoute, (c) => c.json(stubUserBookmarks, 200)).openapi(userRoutes.getUserPagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.getUserSubpagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.listMembersRoute, (c) => c.json(stubListUsers, 200));
 var bookmarkBacklinkCommentRevisionChain = new OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
 var pageChain = new OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.claimPageLinkAccessRoute, (c) => c.json({ ...stubPageWithRevision, granted: false }, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
-var lateContractApp = new OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
+var lateContractApp = new OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(attachmentRoutes.getUploadPolicyRoute, (c) => c.json(stubUploadPolicy, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
 var adminSettingsContractApp = new OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
 var adminUsersPluginsContractApp = new OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.getPluginReadinessRoute, (c) => c.json(stubPluginReadiness, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
 var oauthContractApp = new OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200)).openapi(oauthRoutes.clientInfoRoute, (c) => c.json(stubClientInfo, 200));
@@ -7389,6 +7438,7 @@ export {
   CrowiDiagramNodeSchema,
   CrowiDiagramSidecarSchema,
   CrowiDimensionSchema,
+  CrowiFrontmatterEntrySchema,
   CrowiImagePayloadSchema,
   CrowiLinkCardNodeSchema,
   CrowiLinkCardSidecarSchema,
@@ -7419,6 +7469,10 @@ export {
   EditAdminUserRequestSchema,
   EncryptionNotConfiguredErrorSchema,
   ErrorCodeSchema,
+  FRONTMATTER_MAX_ENTRIES,
+  FRONTMATTER_MAX_KEY_CHARS,
+  FRONTMATTER_MAX_RAW_BYTES,
+  FRONTMATTER_MAX_VALUE_CHARS,
   FederatedHandoffRequestSchema,
   FederatedHandoffResponseSchema,
   FederatedProviderSchema,
@@ -7643,6 +7697,7 @@ export {
   UploadAttachmentErrorCodeSchema,
   UploadAttachmentErrorSchema,
   UploadAttachmentResponseSchema,
+  UploadPolicyResponseSchema,
   UserBookmarksResponseSchema,
   UserLanguageSchema,
   UserListItemSchema,
@@ -7743,6 +7798,7 @@ export {
   getSeenUsersRoute,
   getStorageStatusRoute,
   getUnreadCountRoute,
+  getUploadPolicyRoute,
   getUserBookmarksRoute,
   getUserPageRoute,
   getUserPagesRoute,