@crowi/api-contract 2.0.0-alpha.6 → 2.0.0-alpha.7

package/dist/index.js

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  ALL_CAPABILITIES: () => ALL_CAPABILITIES,
   ALL_SCOPES: () => ALL_SCOPES,
   API_SURFACE_VERSION: () => API_SURFACE_VERSION,
   AccessTokenSchema: () => AccessTokenSchema,
@@ -58,6 +59,8 @@ __export(index_exports, {
   BacklinkSchema: () => BacklinkSchema,
   BookmarkResponseSchema: () => BookmarkResponseSchema,
   BookmarkSchema: () => BookmarkSchema,
+  CapabilitySchema: () => CapabilitySchema,
+  ClaimPageLinkAccessResponseSchema: () => ClaimPageLinkAccessResponseSchema,
   ClearRenderCacheResponseSchema: () => ClearRenderCacheResponseSchema,
   CollabForceReloadMessageSchema: () => CollabForceReloadMessageSchema,
   CollabSaveErrorSchema: () => CollabSaveErrorSchema,
@@ -81,6 +84,7 @@ __export(index_exports, {
   DEVICE_CODE_GRANT_TYPE: () => DEVICE_CODE_GRANT_TYPE,
   DISCOVERY_SCOPES_SUPPORTED: () => DISCOVERY_SCOPES_SUPPORTED,
   DND_EXTRA_UPLOAD_MIME: () => DND_EXTRA_UPLOAD_MIME,
+  DYNAMIC_CAPABILITIES: () => DYNAMIC_CAPABILITIES,
   DeleteAdminUserResponseSchema: () => DeleteAdminUserResponseSchema,
   DeleteCommentRequestSchema: () => DeleteCommentRequestSchema,
   DeleteCommentResponseSchema: () => DeleteCommentResponseSchema,
@@ -334,6 +338,7 @@ __export(index_exports, {
   backlinkRoutes: () => backlinkRoutes,
   bookmarkRoutes: () => bookmarkRoutes,
   cancelDraftRoute: () => cancelDraftRoute,
+  claimPageLinkAccessRoute: () => claimPageLinkAccessRoute,
   clearRenderCacheAllRoute: () => clearRenderCacheAllRoute,
   clearRenderCachePluginRoute: () => clearRenderCachePluginRoute,
   commentRoutes: () => commentRoutes,
@@ -669,7 +674,7 @@ function stripKnownHtmlTags(text) {
 }
 
 // src/contracts/app.ts
-var import_zod_openapi4 = require("@hono/zod-openapi");
+var import_zod_openapi5 = require("@hono/zod-openapi");
 
 // src/schemas/common.ts
 var import_zod_openapi2 = require("@hono/zod-openapi");
@@ -764,18 +769,41 @@ var ForbiddenErrorSchema = ApiErrorSchema.extend({
 });
 
 // src/schemas/app.ts
+var import_zod_openapi4 = require("@hono/zod-openapi");
+
+// src/schemas/app-capabilities.ts
 var import_zod_openapi3 = require("@hono/zod-openapi");
-var AppInfoResponseSchema = import_zod_openapi3.z.object({
-  title: import_zod_openapi3.z.string().nullable(),
-  confidential: import_zod_openapi3.z.string().nullable(),
-  version: import_zod_openapi3.z.string(),
-  apiVersion: import_zod_openapi3.z.string(),
-  capabilities: import_zod_openapi3.z.array(import_zod_openapi3.z.string()),
-  canSelfRegister: import_zod_openapi3.z.boolean()
+var STATIC_CAPABILITIES = [
+  "oauth",
+  // The oauth:* tags mirror GRANT_TYPES_SUPPORTED + the S256 PKCE method
+  // (schemas/oauth-endpoints.ts / the RFC 8414 discovery doc). Keep in sync.
+  "oauth:auth-code",
+  "oauth:device",
+  "oauth:pkce",
+  "pat",
+  "pages",
+  "comments",
+  "bookmarks",
+  "attachments",
+  "notifications"
+];
+var DYNAMIC_CAPABILITIES = ["search", "collab", "collab:redis"];
+var ALL_CAPABILITIES = [...STATIC_CAPABILITIES, ...DYNAMIC_CAPABILITIES];
+var CapabilitySchema = import_zod_openapi3.z.enum(ALL_CAPABILITIES).openapi("Capability");
+var API_SURFACE_VERSION = "v2";
+
+// src/schemas/app.ts
+var AppInfoResponseSchema = import_zod_openapi4.z.object({
+  title: import_zod_openapi4.z.string().nullable(),
+  confidential: import_zod_openapi4.z.string().nullable(),
+  version: import_zod_openapi4.z.string(),
+  apiVersion: import_zod_openapi4.z.string(),
+  capabilities: import_zod_openapi4.z.array(CapabilitySchema),
+  canSelfRegister: import_zod_openapi4.z.boolean()
 });
 
 // src/contracts/app.ts
-var getAppInfoRoute = (0, import_zod_openapi4.createRoute)({
+var getAppInfoRoute = (0, import_zod_openapi5.createRoute)({
   method: "get",
   path: "/app/info",
   tags: ["app"],
@@ -802,29 +830,29 @@ var getAppInfoRoute = (0, import_zod_openapi4.createRoute)({
 var appRoutes = { getAppInfoRoute };
 
 // src/contracts/installer.ts
-var import_zod_openapi6 = require("@hono/zod-openapi");
+var import_zod_openapi7 = require("@hono/zod-openapi");
 
 // src/schemas/installer.ts
-var import_zod_openapi5 = require("@hono/zod-openapi");
-var InstallerStatusResponseSchema = import_zod_openapi5.z.object({
-  status: import_zod_openapi5.z.enum(["installer_required", "already_installed"])
-});
-var CreateAdminRequestSchema = import_zod_openapi5.z.object({
-  registerForm: import_zod_openapi5.z.object({
-    username: import_zod_openapi5.z.string().min(1).regex(/^[\da-zA-Z\-_.]+$/, "username may only contain letters, digits, hyphens, underscores, and dots"),
-    name: import_zod_openapi5.z.string().min(1),
-    email: import_zod_openapi5.z.string().email(),
-    password: import_zod_openapi5.z.string().min(6).regex(/^[\x20-\x7F]{6,}$/, "password must be 6+ printable ASCII characters")
+var import_zod_openapi6 = require("@hono/zod-openapi");
+var InstallerStatusResponseSchema = import_zod_openapi6.z.object({
+  status: import_zod_openapi6.z.enum(["installer_required", "already_installed"])
+});
+var CreateAdminRequestSchema = import_zod_openapi6.z.object({
+  registerForm: import_zod_openapi6.z.object({
+    username: import_zod_openapi6.z.string().min(1).regex(/^[\da-zA-Z\-_.]+$/, "username may only contain letters, digits, hyphens, underscores, and dots"),
+    name: import_zod_openapi6.z.string().min(1),
+    email: import_zod_openapi6.z.string().email(),
+    password: import_zod_openapi6.z.string().min(6).regex(/^[\x20-\x7F]{6,}$/, "password must be 6+ printable ASCII characters")
   })
 });
-var CreateAdminResponseSchema = import_zod_openapi5.z.object({
-  status: import_zod_openapi5.z.enum(["ok", "error"]),
-  message: import_zod_openapi5.z.string().optional(),
-  errors: import_zod_openapi5.z.array(import_zod_openapi5.z.string()).optional()
+var CreateAdminResponseSchema = import_zod_openapi6.z.object({
+  status: import_zod_openapi6.z.enum(["ok", "error"]),
+  message: import_zod_openapi6.z.string().optional(),
+  errors: import_zod_openapi6.z.array(import_zod_openapi6.z.string()).optional()
 });
 
 // src/contracts/installer.ts
-var getInstallerStatusRoute = (0, import_zod_openapi6.createRoute)({
+var getInstallerStatusRoute = (0, import_zod_openapi7.createRoute)({
   method: "get",
   path: "/installer",
   tags: ["installer"],
@@ -848,7 +876,7 @@ var getInstallerStatusRoute = (0, import_zod_openapi6.createRoute)({
     }
   }
 });
-var createAdminRoute = (0, import_zod_openapi6.createRoute)({
+var createAdminRoute = (0, import_zod_openapi7.createRoute)({
   method: "post",
   path: "/installer/createAdmin",
   tags: ["installer"],
@@ -892,56 +920,56 @@ var createAdminRoute = (0, import_zod_openapi6.createRoute)({
 var installerRoutes = { getInstallerStatusRoute, createAdminRoute };
 
 // src/contracts/tokenAuth.ts
-var import_zod_openapi8 = require("@hono/zod-openapi");
+var import_zod_openapi9 = require("@hono/zod-openapi");
 
 // src/schemas/auth.ts
-var import_zod_openapi7 = require("@hono/zod-openapi");
-var TokenAuthLoginRequestSchema = import_zod_openapi7.z.object({
-  email: import_zod_openapi7.z.string().email(),
-  password: import_zod_openapi7.z.string().min(6)
-});
-var TokenAuthResponseSchema = import_zod_openapi7.z.object({
-  accessToken: import_zod_openapi7.z.string(),
-  refreshToken: import_zod_openapi7.z.string(),
-  expiresIn: import_zod_openapi7.z.number(),
+var import_zod_openapi8 = require("@hono/zod-openapi");
+var TokenAuthLoginRequestSchema = import_zod_openapi8.z.object({
+  email: import_zod_openapi8.z.string().email(),
+  password: import_zod_openapi8.z.string().min(6)
+});
+var TokenAuthResponseSchema = import_zod_openapi8.z.object({
+  accessToken: import_zod_openapi8.z.string(),
+  refreshToken: import_zod_openapi8.z.string(),
+  expiresIn: import_zod_openapi8.z.number(),
   // seconds until expiration
-  user: import_zod_openapi7.z.object({
-    id: import_zod_openapi7.z.string(),
-    username: import_zod_openapi7.z.string(),
-    email: import_zod_openapi7.z.string().email(),
-    name: import_zod_openapi7.z.string(),
-    image: import_zod_openapi7.z.string().optional(),
-    admin: import_zod_openapi7.z.boolean().optional()
+  user: import_zod_openapi8.z.object({
+    id: import_zod_openapi8.z.string(),
+    username: import_zod_openapi8.z.string(),
+    email: import_zod_openapi8.z.string().email(),
+    name: import_zod_openapi8.z.string(),
+    image: import_zod_openapi8.z.string().optional(),
+    admin: import_zod_openapi8.z.boolean().optional()
   })
 });
-var RefreshTokenRequestSchema = import_zod_openapi7.z.object({
-  refreshToken: import_zod_openapi7.z.string()
+var RefreshTokenRequestSchema = import_zod_openapi8.z.object({
+  refreshToken: import_zod_openapi8.z.string()
 });
-var TokenAuthRegisterRequestSchema = import_zod_openapi7.z.object({
-  username: import_zod_openapi7.z.string(),
-  name: import_zod_openapi7.z.string(),
-  email: import_zod_openapi7.z.string().email(),
-  password: import_zod_openapi7.z.string().min(6)
+var TokenAuthRegisterRequestSchema = import_zod_openapi8.z.object({
+  username: import_zod_openapi8.z.string(),
+  name: import_zod_openapi8.z.string(),
+  email: import_zod_openapi8.z.string().email(),
+  password: import_zod_openapi8.z.string().min(6)
 });
-var RegisterPendingResponseSchema = import_zod_openapi7.z.object({
-  status: import_zod_openapi7.z.enum(["confirmation_required", "approval_required"])
+var RegisterPendingResponseSchema = import_zod_openapi8.z.object({
+  status: import_zod_openapi8.z.enum(["confirmation_required", "approval_required"])
 });
 
 // src/contracts/tokenAuth.ts
-var TokenLogoutResponseSchema = import_zod_openapi8.z.object({ message: import_zod_openapi8.z.string() });
-var TokenMeResponseSchema = import_zod_openapi8.z.object({
-  user: import_zod_openapi8.z.object({
-    id: import_zod_openapi8.z.string(),
-    username: import_zod_openapi8.z.string(),
-    email: import_zod_openapi8.z.string().email(),
-    name: import_zod_openapi8.z.string(),
-    image: import_zod_openapi8.z.string().optional(),
-    status: import_zod_openapi8.z.number(),
-    admin: import_zod_openapi8.z.boolean().optional(),
-    createdAt: import_zod_openapi8.z.string()
+var TokenLogoutResponseSchema = import_zod_openapi9.z.object({ message: import_zod_openapi9.z.string() });
+var TokenMeResponseSchema = import_zod_openapi9.z.object({
+  user: import_zod_openapi9.z.object({
+    id: import_zod_openapi9.z.string(),
+    username: import_zod_openapi9.z.string(),
+    email: import_zod_openapi9.z.string().email(),
+    name: import_zod_openapi9.z.string(),
+    image: import_zod_openapi9.z.string().optional(),
+    status: import_zod_openapi9.z.number(),
+    admin: import_zod_openapi9.z.boolean().optional(),
+    createdAt: import_zod_openapi9.z.string()
   })
 });
-var tokenLoginRoute = (0, import_zod_openapi8.createRoute)({
+var tokenLoginRoute = (0, import_zod_openapi9.createRoute)({
   method: "post",
   path: "/auth/login",
   tags: ["tokenAuth"],
@@ -978,7 +1006,7 @@ var tokenLoginRoute = (0, import_zod_openapi8.createRoute)({
     }
   }
 });
-var tokenRegisterRoute = (0, import_zod_openapi8.createRoute)({
+var tokenRegisterRoute = (0, import_zod_openapi9.createRoute)({
   method: "post",
   path: "/auth/register",
   tags: ["tokenAuth"],
@@ -1019,7 +1047,7 @@ var tokenRegisterRoute = (0, import_zod_openapi8.createRoute)({
     }
   }
 });
-var tokenRefreshRoute = (0, import_zod_openapi8.createRoute)({
+var tokenRefreshRoute = (0, import_zod_openapi9.createRoute)({
   method: "post",
   path: "/auth/refresh",
   tags: ["tokenAuth"],
@@ -1056,7 +1084,7 @@ var tokenRefreshRoute = (0, import_zod_openapi8.createRoute)({
     }
   }
 });
-var tokenLogoutRoute = (0, import_zod_openapi8.createRoute)({
+var tokenLogoutRoute = (0, import_zod_openapi9.createRoute)({
   method: "post",
   path: "/auth/logout",
   tags: ["tokenAuth"],
@@ -1066,7 +1094,7 @@ var tokenLogoutRoute = (0, import_zod_openapi8.createRoute)({
     body: {
       content: {
         "application/json": {
-          schema: import_zod_openapi8.z.object({ refreshToken: import_zod_openapi8.z.string().optional() })
+          schema: import_zod_openapi9.z.object({ refreshToken: import_zod_openapi9.z.string().optional() })
         }
       }
     }
@@ -1086,7 +1114,7 @@ var tokenLogoutRoute = (0, import_zod_openapi8.createRoute)({
     }
   }
 });
-var tokenMeRoute = (0, import_zod_openapi8.createRoute)({
+var tokenMeRoute = (0, import_zod_openapi9.createRoute)({
   method: "get",
   path: "/auth/me",
   tags: ["tokenAuth"],
@@ -1116,22 +1144,22 @@ var tokenAuthRoutes = {
 };
 
 // src/contracts/inviteAccept.ts
-var import_zod_openapi10 = require("@hono/zod-openapi");
+var import_zod_openapi11 = require("@hono/zod-openapi");
 
 // src/schemas/inviteAccept.ts
-var import_zod_openapi9 = require("@hono/zod-openapi");
-var InviteAcceptRequestSchema = import_zod_openapi9.z.object({
-  token: import_zod_openapi9.z.string(),
-  username: import_zod_openapi9.z.string().min(1),
-  name: import_zod_openapi9.z.string().min(1),
-  password: import_zod_openapi9.z.string().min(6)
+var import_zod_openapi10 = require("@hono/zod-openapi");
+var InviteAcceptRequestSchema = import_zod_openapi10.z.object({
+  token: import_zod_openapi10.z.string(),
+  username: import_zod_openapi10.z.string().min(1),
+  name: import_zod_openapi10.z.string().min(1),
+  password: import_zod_openapi10.z.string().min(6)
 });
-var InvitePreviewResponseSchema = import_zod_openapi9.z.object({
-  email: import_zod_openapi9.z.string().email()
+var InvitePreviewResponseSchema = import_zod_openapi10.z.object({
+  email: import_zod_openapi10.z.string().email()
 });
 
 // src/contracts/inviteAccept.ts
-var invitePreviewRoute = (0, import_zod_openapi10.createRoute)({
+var invitePreviewRoute = (0, import_zod_openapi11.createRoute)({
   method: "get",
   path: "/invite/accept",
   tags: ["inviteAccept"],
@@ -1158,7 +1186,7 @@ var invitePreviewRoute = (0, import_zod_openapi10.createRoute)({
     }
   }
 });
-var acceptInviteRoute = (0, import_zod_openapi10.createRoute)({
+var acceptInviteRoute = (0, import_zod_openapi11.createRoute)({
   method: "post",
   path: "/invite/accept",
   tags: ["inviteAccept"],
@@ -1201,23 +1229,23 @@ var inviteAcceptRoutes = {
 };
 
 // src/contracts/passwordReset.ts
-var import_zod_openapi12 = require("@hono/zod-openapi");
+var import_zod_openapi13 = require("@hono/zod-openapi");
 
 // src/schemas/passwordReset.ts
-var import_zod_openapi11 = require("@hono/zod-openapi");
-var ForgotPasswordRequestSchema = import_zod_openapi11.z.object({
-  email: import_zod_openapi11.z.string().email()
+var import_zod_openapi12 = require("@hono/zod-openapi");
+var ForgotPasswordRequestSchema = import_zod_openapi12.z.object({
+  email: import_zod_openapi12.z.string().email()
 });
-var ForgotPasswordResponseSchema = import_zod_openapi11.z.object({
-  ok: import_zod_openapi11.z.literal(true)
+var ForgotPasswordResponseSchema = import_zod_openapi12.z.object({
+  ok: import_zod_openapi12.z.literal(true)
 });
-var ResetPasswordRequestSchema = import_zod_openapi11.z.object({
-  token: import_zod_openapi11.z.string(),
-  password: import_zod_openapi11.z.string().min(6)
+var ResetPasswordRequestSchema = import_zod_openapi12.z.object({
+  token: import_zod_openapi12.z.string(),
+  password: import_zod_openapi12.z.string().min(6)
 });
 
 // src/contracts/passwordReset.ts
-var forgotPasswordRoute = (0, import_zod_openapi12.createRoute)({
+var forgotPasswordRoute = (0, import_zod_openapi13.createRoute)({
   method: "post",
   path: "/auth/forgot-password",
   tags: ["passwordReset"],
@@ -1242,7 +1270,7 @@ var forgotPasswordRoute = (0, import_zod_openapi12.createRoute)({
     }
   }
 });
-var validateResetTokenRoute = (0, import_zod_openapi12.createRoute)({
+var validateResetTokenRoute = (0, import_zod_openapi13.createRoute)({
   method: "get",
   path: "/auth/reset-password",
   tags: ["passwordReset"],
@@ -1265,7 +1293,7 @@ var validateResetTokenRoute = (0, import_zod_openapi12.createRoute)({
     }
   }
 });
-var selfResetPasswordRoute = (0, import_zod_openapi12.createRoute)({
+var selfResetPasswordRoute = (0, import_zod_openapi13.createRoute)({
   method: "post",
   path: "/auth/reset-password",
   tags: ["passwordReset"],
@@ -1305,19 +1333,19 @@ var passwordResetRoutes = {
 };
 
 // src/contracts/activation.ts
-var import_zod_openapi14 = require("@hono/zod-openapi");
+var import_zod_openapi15 = require("@hono/zod-openapi");
 
 // src/schemas/activation.ts
-var import_zod_openapi13 = require("@hono/zod-openapi");
-var ActivateRequestSchema = import_zod_openapi13.z.object({
-  token: import_zod_openapi13.z.string()
+var import_zod_openapi14 = require("@hono/zod-openapi");
+var ActivateRequestSchema = import_zod_openapi14.z.object({
+  token: import_zod_openapi14.z.string()
 });
-var ActivateValidationResponseSchema = import_zod_openapi13.z.object({
-  ok: import_zod_openapi13.z.literal(true)
+var ActivateValidationResponseSchema = import_zod_openapi14.z.object({
+  ok: import_zod_openapi14.z.literal(true)
 });
 
 // src/contracts/activation.ts
-var validateActivationTokenRoute = (0, import_zod_openapi14.createRoute)({
+var validateActivationTokenRoute = (0, import_zod_openapi15.createRoute)({
   method: "get",
   path: "/auth/activate",
   tags: ["activation"],
@@ -1340,7 +1368,7 @@ var validateActivationTokenRoute = (0, import_zod_openapi14.createRoute)({
     }
   }
 });
-var activateAccountRoute = (0, import_zod_openapi14.createRoute)({
+var activateAccountRoute = (0, import_zod_openapi15.createRoute)({
   method: "post",
   path: "/auth/activate",
   tags: ["activation"],
@@ -1375,21 +1403,21 @@ var activationRoutes = {
 };
 
 // src/contracts/emailChange.ts
-var import_zod_openapi16 = require("@hono/zod-openapi");
+var import_zod_openapi17 = require("@hono/zod-openapi");
 
 // src/schemas/emailChange.ts
-var import_zod_openapi15 = require("@hono/zod-openapi");
-var ConfirmEmailChangeRequestSchema = import_zod_openapi15.z.object({
-  token: import_zod_openapi15.z.string()
+var import_zod_openapi16 = require("@hono/zod-openapi");
+var ConfirmEmailChangeRequestSchema = import_zod_openapi16.z.object({
+  token: import_zod_openapi16.z.string()
 });
-var ConfirmEmailChangeResponseSchema = import_zod_openapi15.z.object({
-  ok: import_zod_openapi15.z.literal(true),
+var ConfirmEmailChangeResponseSchema = import_zod_openapi16.z.object({
+  ok: import_zod_openapi16.z.literal(true),
   /** The newly-confirmed email address. */
-  email: import_zod_openapi15.z.string().email()
+  email: import_zod_openapi16.z.string().email()
 });
 
 // src/contracts/emailChange.ts
-var validateEmailChangeTokenRoute = (0, import_zod_openapi16.createRoute)({
+var validateEmailChangeTokenRoute = (0, import_zod_openapi17.createRoute)({
   method: "get",
   path: "/auth/confirm-email-change",
   tags: ["emailChange"],
@@ -1412,7 +1440,7 @@ var validateEmailChangeTokenRoute = (0, import_zod_openapi16.createRoute)({
     }
   }
 });
-var confirmEmailChangeRoute = (0, import_zod_openapi16.createRoute)({
+var confirmEmailChangeRoute = (0, import_zod_openapi17.createRoute)({
   method: "post",
   path: "/auth/confirm-email-change",
   tags: ["emailChange"],
@@ -1451,19 +1479,19 @@ var emailChangeRoutes = {
 };
 
 // src/contracts/me.ts
-var import_zod_openapi21 = require("@hono/zod-openapi");
+var import_zod_openapi22 = require("@hono/zod-openapi");
 
 // src/schemas/me.ts
-var import_zod_openapi20 = require("@hono/zod-openapi");
+var import_zod_openapi21 = require("@hono/zod-openapi");
 
 // src/schemas/page.ts
-var import_zod_openapi19 = require("@hono/zod-openapi");
+var import_zod_openapi20 = require("@hono/zod-openapi");
 
 // src/schemas/collab.ts
-var import_zod_openapi18 = require("@hono/zod-openapi");
+var import_zod_openapi19 = require("@hono/zod-openapi");
 
 // src/schemas/userPublic.ts
-var import_zod_openapi17 = require("@hono/zod-openapi");
+var import_zod_openapi18 = require("@hono/zod-openapi");
 var UserPublicStatus = {
   REGISTERED: 1,
   ACTIVE: 2,
@@ -1471,64 +1499,64 @@ var UserPublicStatus = {
   DELETED: 4,
   INVITED: 5
 };
-var UserPublicStatusSchema = import_zod_openapi17.z.nativeEnum(UserPublicStatus);
-var UserPublicSchema = import_zod_openapi17.z.object({
-  _id: import_zod_openapi17.z.string(),
-  id: import_zod_openapi17.z.string().optional(),
+var UserPublicStatusSchema = import_zod_openapi18.z.nativeEnum(UserPublicStatus);
+var UserPublicSchema = import_zod_openapi18.z.object({
+  _id: import_zod_openapi18.z.string(),
+  id: import_zod_openapi18.z.string().optional(),
   // for compatibility (virtual field)
-  username: import_zod_openapi17.z.string(),
-  name: import_zod_openapi17.z.string(),
-  email: import_zod_openapi17.z.string().email(),
-  image: import_zod_openapi17.z.string().nullable().optional(),
-  introduction: import_zod_openapi17.z.string().optional(),
-  createdAt: import_zod_openapi17.z.string(),
-  admin: import_zod_openapi17.z.boolean().optional(),
+  username: import_zod_openapi18.z.string(),
+  name: import_zod_openapi18.z.string(),
+  email: import_zod_openapi18.z.string().email(),
+  image: import_zod_openapi18.z.string().nullable().optional(),
+  introduction: import_zod_openapi18.z.string().optional(),
+  createdAt: import_zod_openapi18.z.string(),
+  admin: import_zod_openapi18.z.boolean().optional(),
   status: UserPublicStatusSchema.optional()
 });
 
 // src/schemas/collab.ts
 var ContributorRefSchema = UserPublicSchema;
-var RevisionTypeSchema = import_zod_openapi18.z.enum(["snapshot", "incremental"]);
-var WsTokenResponseSchema = import_zod_openapi18.z.object({
-  wsToken: import_zod_openapi18.z.string(),
-  pageId: import_zod_openapi18.z.string(),
-  expiresAt: import_zod_openapi18.z.string(),
-  readonly: import_zod_openapi18.z.boolean()
-});
-var WsTokenPayloadSchema = import_zod_openapi18.z.object({
-  userId: import_zod_openapi18.z.string(),
-  pageId: import_zod_openapi18.z.string(),
-  readonly: import_zod_openapi18.z.boolean(),
-  iat: import_zod_openapi18.z.number().int(),
-  exp: import_zod_openapi18.z.number().int()
-});
-var CollabSaveMessageSchema = import_zod_openapi18.z.object({
-  kind: import_zod_openapi18.z.literal("crowi:save"),
-  message: import_zod_openapi18.z.string().optional()
-});
-var CollabSaveOkSchema = import_zod_openapi18.z.object({
-  kind: import_zod_openapi18.z.literal("crowi:save-ok"),
-  revisionId: import_zod_openapi18.z.string()
-});
-var CollabSaveErrorSchema = import_zod_openapi18.z.object({
-  kind: import_zod_openapi18.z.literal("crowi:save-error"),
-  code: import_zod_openapi18.z.string(),
-  message: import_zod_openapi18.z.string()
-});
-var CollabForceReloadMessageSchema = import_zod_openapi18.z.object({
-  kind: import_zod_openapi18.z.literal("crowi:force-reload"),
-  reason: import_zod_openapi18.z.string().optional()
+var RevisionTypeSchema = import_zod_openapi19.z.enum(["snapshot", "incremental"]);
+var WsTokenResponseSchema = import_zod_openapi19.z.object({
+  wsToken: import_zod_openapi19.z.string(),
+  pageId: import_zod_openapi19.z.string(),
+  expiresAt: import_zod_openapi19.z.string(),
+  readonly: import_zod_openapi19.z.boolean()
+});
+var WsTokenPayloadSchema = import_zod_openapi19.z.object({
+  userId: import_zod_openapi19.z.string(),
+  pageId: import_zod_openapi19.z.string(),
+  readonly: import_zod_openapi19.z.boolean(),
+  iat: import_zod_openapi19.z.number().int(),
+  exp: import_zod_openapi19.z.number().int()
+});
+var CollabSaveMessageSchema = import_zod_openapi19.z.object({
+  kind: import_zod_openapi19.z.literal("crowi:save"),
+  message: import_zod_openapi19.z.string().optional()
+});
+var CollabSaveOkSchema = import_zod_openapi19.z.object({
+  kind: import_zod_openapi19.z.literal("crowi:save-ok"),
+  revisionId: import_zod_openapi19.z.string()
+});
+var CollabSaveErrorSchema = import_zod_openapi19.z.object({
+  kind: import_zod_openapi19.z.literal("crowi:save-error"),
+  code: import_zod_openapi19.z.string(),
+  message: import_zod_openapi19.z.string()
+});
+var CollabForceReloadMessageSchema = import_zod_openapi19.z.object({
+  kind: import_zod_openapi19.z.literal("crowi:force-reload"),
+  reason: import_zod_openapi19.z.string().optional()
 });
 
 // src/schemas/page.ts
-var PageGrantSchema = import_zod_openapi19.z.enum(["1", "2", "3", "4"]).transform((val) => Number(val));
+var PageGrantSchema = import_zod_openapi20.z.enum(["1", "2", "3", "4"]).transform((val) => Number(val));
 var PageGrantEnum = {
   PUBLIC: 1,
   RESTRICTED: 2,
   SPECIFIED: 3,
   OWNER: 4
 };
-var PageStatusSchema = import_zod_openapi19.z.enum(["wip", "published", "deleted", "deprecated", "draft"]);
+var PageStatusSchema = import_zod_openapi20.z.enum(["wip", "published", "deleted", "deprecated", "draft"]);
 var PageStatusEnum = {
   WIP: "wip",
   PUBLISHED: "published",
@@ -1536,51 +1564,51 @@ var PageStatusEnum = {
   DEPRECATED: "deprecated",
   DRAFT: "draft"
 };
-var PageTypeSchema = import_zod_openapi19.z.enum(["portal", "user", "public"]);
+var PageTypeSchema = import_zod_openapi20.z.enum(["portal", "user", "public"]);
 var PageTypeEnum = {
   PORTAL: "portal",
   USER: "user",
   PUBLIC: "public"
 };
-var PageUserSchema = import_zod_openapi19.z.object({
-  _id: import_zod_openapi19.z.string(),
-  id: import_zod_openapi19.z.string().optional(),
+var PageUserSchema = import_zod_openapi20.z.object({
+  _id: import_zod_openapi20.z.string(),
+  id: import_zod_openapi20.z.string().optional(),
   // for compatibility
-  username: import_zod_openapi19.z.string(),
-  name: import_zod_openapi19.z.string(),
-  email: import_zod_openapi19.z.string().email(),
-  image: import_zod_openapi19.z.string().nullable().optional(),
-  createdAt: import_zod_openapi19.z.string()
-});
-var TocEntrySchema = import_zod_openapi19.z.object({
-  level: import_zod_openapi19.z.number().int().min(1).max(6),
-  text: import_zod_openapi19.z.string(),
-  anchorId: import_zod_openapi19.z.string()
-});
-var WikiLinkSchema = import_zod_openapi19.z.object({
+  username: import_zod_openapi20.z.string(),
+  name: import_zod_openapi20.z.string(),
+  email: import_zod_openapi20.z.string().email(),
+  image: import_zod_openapi20.z.string().nullable().optional(),
+  createdAt: import_zod_openapi20.z.string()
+});
+var TocEntrySchema = import_zod_openapi20.z.object({
+  level: import_zod_openapi20.z.number().int().min(1).max(6),
+  text: import_zod_openapi20.z.string(),
+  anchorId: import_zod_openapi20.z.string()
+});
+var WikiLinkSchema = import_zod_openapi20.z.object({
   /** Verbatim source between the `[[` `]]` (no surrounding brackets). */
-  raw: import_zod_openapi19.z.string(),
+  raw: import_zod_openapi20.z.string(),
   /** Normalised target (left of the `|`, fragment trimmed for resolution). */
-  target: import_zod_openapi19.z.string(),
+  target: import_zod_openapi20.z.string(),
   /** Optional pipe-aliased display text (right of the `|`). */
-  displayText: import_zod_openapi19.z.string().optional()
-});
-var MentionSchema = import_zod_openapi19.z.object({
-  username: import_zod_openapi19.z.string()
-});
-var RevisionMetaSchemaShape = import_zod_openapi19.z.object({
-  toc: import_zod_openapi19.z.array(TocEntrySchema).optional(),
-  wikiLinks: import_zod_openapi19.z.array(WikiLinkSchema).optional(),
-  mentions: import_zod_openapi19.z.array(MentionSchema).optional(),
-  codeBlockLanguages: import_zod_openapi19.z.array(import_zod_openapi19.z.string()).optional()
-});
-var RevisionSchema = import_zod_openapi19.z.object({
-  _id: import_zod_openapi19.z.string(),
-  path: import_zod_openapi19.z.string(),
-  body: import_zod_openapi19.z.string(),
-  format: import_zod_openapi19.z.string().default("markdown"),
+  displayText: import_zod_openapi20.z.string().optional()
+});
+var MentionSchema = import_zod_openapi20.z.object({
+  username: import_zod_openapi20.z.string()
+});
+var RevisionMetaSchemaShape = import_zod_openapi20.z.object({
+  toc: import_zod_openapi20.z.array(TocEntrySchema).optional(),
+  wikiLinks: import_zod_openapi20.z.array(WikiLinkSchema).optional(),
+  mentions: import_zod_openapi20.z.array(MentionSchema).optional(),
+  codeBlockLanguages: import_zod_openapi20.z.array(import_zod_openapi20.z.string()).optional()
+});
+var RevisionSchema = import_zod_openapi20.z.object({
+  _id: import_zod_openapi20.z.string(),
+  path: import_zod_openapi20.z.string(),
+  body: import_zod_openapi20.z.string(),
+  format: import_zod_openapi20.z.string().default("markdown"),
   author: PageUserSchema.nullable().optional(),
-  createdAt: import_zod_openapi19.z.string(),
+  createdAt: import_zod_openapi20.z.string(),
   meta: RevisionMetaSchemaShape.optional(),
   // RFC-0002 Phase 3: transformed mdast (parse + core plugins +
   // shiki) for the web client to render without re-parsing the body.
@@ -1588,42 +1616,42 @@ var RevisionSchema = import_zod_openapi19.z.object({
   // spec to maintain a strict Zod schema for. Only single-page detail
   // (`getPage`) and single-revision detail (`getRevision`) emit it;
   // list endpoints skip it for payload weight.
-  renderedAst: import_zod_openapi19.z.unknown().optional(),
+  renderedAst: import_zod_openapi20.z.unknown().optional(),
   // RFC-0002 round 3.1: semver of the renderer pipeline that produced
   // `renderedAst`. The read path uses this to detect stale entries
   // (rebuilt by `renderer:rebuild` once RFC-0008 lands). Absent on
   // revisions saved before this field was introduced.
-  rendererVersion: import_zod_openapi19.z.string().optional(),
+  rendererVersion: import_zod_openapi20.z.string().optional(),
   // RFC-0003 collaborative-save fields. All optional; v1.x revisions
   // emit none of them. See `packages/api/src/models/revision.ts` for
   // semantics. The list-page endpoint currently does not surface
   // these — they only appear on the Phase 5+ checkpoint Revisions
   // produced by Hocuspocus and on the single-revision detail route.
-  parentRevisionId: import_zod_openapi19.z.string().nullable().optional(),
+  parentRevisionId: import_zod_openapi20.z.string().nullable().optional(),
   type: RevisionTypeSchema.optional(),
-  savedBy: import_zod_openapi19.z.union([import_zod_openapi19.z.string(), PageUserSchema]).nullable().optional(),
-  contributors: import_zod_openapi19.z.array(import_zod_openapi19.z.union([import_zod_openapi19.z.string(), PageUserSchema])).optional(),
-  message: import_zod_openapi19.z.string().optional(),
+  savedBy: import_zod_openapi20.z.union([import_zod_openapi20.z.string(), PageUserSchema]).nullable().optional(),
+  contributors: import_zod_openapi20.z.array(import_zod_openapi20.z.union([import_zod_openapi20.z.string(), PageUserSchema])).optional(),
+  message: import_zod_openapi20.z.string().optional(),
   // RFC-0010 — edit channel ('web' | 'oauth' | 'pat'); absent on
   // pre-RFC-0010 / collaborative / browser revisions.
-  editVia: import_zod_openapi19.z.enum(["web", "oauth", "pat"]).optional()
-});
-var PageExtendedSchema = import_zod_openapi19.z.record(import_zod_openapi19.z.string(), import_zod_openapi19.z.any()).optional();
-var PageSchema = import_zod_openapi19.z.object({
-  _id: import_zod_openapi19.z.string(),
-  path: import_zod_openapi19.z.string(),
-  revision: import_zod_openapi19.z.union([import_zod_openapi19.z.string(), RevisionSchema]).optional(),
-  redirectTo: import_zod_openapi19.z.string().nullable().optional(),
+  editVia: import_zod_openapi20.z.enum(["web", "oauth", "pat"]).optional()
+});
+var PageExtendedSchema = import_zod_openapi20.z.record(import_zod_openapi20.z.string(), import_zod_openapi20.z.any()).optional();
+var PageSchema = import_zod_openapi20.z.object({
+  _id: import_zod_openapi20.z.string(),
+  path: import_zod_openapi20.z.string(),
+  revision: import_zod_openapi20.z.union([import_zod_openapi20.z.string(), RevisionSchema]).optional(),
+  redirectTo: import_zod_openapi20.z.string().nullable().optional(),
   status: PageStatusSchema.nullable().optional(),
-  grant: import_zod_openapi19.z.number().optional(),
-  grantedUsers: import_zod_openapi19.z.array(import_zod_openapi19.z.string()).optional(),
-  creator: import_zod_openapi19.z.union([import_zod_openapi19.z.string(), PageUserSchema]).nullable().optional(),
-  lastUpdateUser: import_zod_openapi19.z.union([import_zod_openapi19.z.string(), PageUserSchema]).nullable().optional(),
-  liker: import_zod_openapi19.z.array(import_zod_openapi19.z.string()).optional(),
-  commentCount: import_zod_openapi19.z.number().default(0),
+  grant: import_zod_openapi20.z.number().optional(),
+  grantedUsers: import_zod_openapi20.z.array(import_zod_openapi20.z.string()).optional(),
+  creator: import_zod_openapi20.z.union([import_zod_openapi20.z.string(), PageUserSchema]).nullable().optional(),
+  lastUpdateUser: import_zod_openapi20.z.union([import_zod_openapi20.z.string(), PageUserSchema]).nullable().optional(),
+  liker: import_zod_openapi20.z.array(import_zod_openapi20.z.string()).optional(),
+  commentCount: import_zod_openapi20.z.number().default(0),
   extended: PageExtendedSchema,
-  createdAt: import_zod_openapi19.z.string(),
-  updatedAt: import_zod_openapi19.z.string().optional(),
+  createdAt: import_zod_openapi20.z.string(),
+  updatedAt: import_zod_openapi20.z.string().optional(),
   // RFC-0003 collaborative-edit fields. All optional; `null` is the
   // "no live state yet" value. Existing read endpoints (list /
   // detail) do not currently emit these — the contract is widened
@@ -1631,31 +1659,32 @@ var PageSchema = import_zod_openapi19.z.object({
   // bump. `yjsState` is intentionally omitted from the contract:
   // the binary blob lives only inside Hocuspocus and never crosses
   // the HTTP API.
-  currentRevision: import_zod_openapi19.z.string().nullable().optional(),
-  yjsCheckpointAt: import_zod_openapi19.z.string().nullable().optional(),
+  currentRevision: import_zod_openapi20.z.string().nullable().optional(),
+  yjsCheckpointAt: import_zod_openapi20.z.string().nullable().optional(),
   // dynamic fields
-  latestRevision: import_zod_openapi19.z.string().optional(),
-  likerCount: import_zod_openapi19.z.number().optional(),
-  seenUsersCount: import_zod_openapi19.z.number().optional()
+  latestRevision: import_zod_openapi20.z.string().optional(),
+  likerCount: import_zod_openapi20.z.number().optional(),
+  seenUsersCount: import_zod_openapi20.z.number().optional()
 });
 var PageWithRevisionSchema = PageSchema.extend({
   revision: RevisionSchema,
   creator: PageUserSchema.nullable().optional(),
   lastUpdateUser: PageUserSchema.nullable().optional()
 });
-var GetPageRequestSchema = import_zod_openapi19.z.object({
-  path: import_zod_openapi19.z.string().optional(),
-  page_id: import_zod_openapi19.z.string().optional(),
-  revision_id: import_zod_openapi19.z.string().optional()
+var GetPageRequestSchema = import_zod_openapi20.z.object({
+  path: import_zod_openapi20.z.string().optional(),
+  page_id: import_zod_openapi20.z.string().optional(),
+  revision_id: import_zod_openapi20.z.string().optional()
 });
-var GetPageResponseSchema = import_zod_openapi19.z.object({
+var GetPageResponseSchema = import_zod_openapi20.z.object({
   page: PageWithRevisionSchema
 });
-var ListPagesRequestSchema = import_zod_openapi19.z.object({
-  path: import_zod_openapi19.z.string().optional(),
-  user: import_zod_openapi19.z.string().optional(),
-  limit: import_zod_openapi19.z.coerce.number().optional().default(50),
-  offset: import_zod_openapi19.z.coerce.number().optional().default(0),
+var ClaimPageLinkAccessResponseSchema = GetPageResponseSchema.extend({ granted: import_zod_openapi20.z.boolean() });
+var ListPagesRequestSchema = import_zod_openapi20.z.object({
+  path: import_zod_openapi20.z.string().optional(),
+  user: import_zod_openapi20.z.string().optional(),
+  limit: import_zod_openapi20.z.coerce.number().optional().default(50),
+  offset: import_zod_openapi20.z.coerce.number().optional().default(0),
   // NOT `z.coerce.boolean()`: that uses JS `Boolean(v)`, so the string
   // `"false"` (which is how the web client serialises `false` on the
   // query string) coerces to `true`. That silently flipped
@@ -1663,25 +1692,25 @@ var ListPagesRequestSchema = import_zod_openapi19.z.object({
   // filter and leak other users' drafts. Parse the string explicitly so
   // only `"true"` / `true` is truthy; anything else (incl. `"false"`,
   // absent) is `false`.
-  include_deleted: import_zod_openapi19.z.preprocess((v) => v === true || v === "true" || v === "1", import_zod_openapi19.z.boolean()).optional().default(false),
+  include_deleted: import_zod_openapi20.z.preprocess((v) => v === true || v === "true" || v === "1", import_zod_openapi20.z.boolean()).optional().default(false),
   // Sort field + direction for the listing. Defaults preserve the legacy
   // "newest-updated first" order so existing callers are unaffected.
   // `path` sorts alphabetically by full page path (≈ name order).
-  sort: import_zod_openapi19.z.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
-  order: import_zod_openapi19.z.enum(["asc", "desc"]).optional().default("desc"),
+  sort: import_zod_openapi20.z.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
+  order: import_zod_openapi20.z.enum(["asc", "desc"]).optional().default("desc"),
   // When listing a portal path (`/foo/`), open the portal document at this
   // past revision so the catch-all can mirror `?revision_id=` on portals.
   // Only the `portalPage` is rewound — the child rows always reflect the
   // latest. Absent for normal listings.
-  revision_id: import_zod_openapi19.z.string().optional()
+  revision_id: import_zod_openapi20.z.string().optional()
 });
-var PagerSchema = import_zod_openapi19.z.object({
-  prev: import_zod_openapi19.z.number().nullable(),
-  next: import_zod_openapi19.z.number().nullable(),
-  offset: import_zod_openapi19.z.number()
+var PagerSchema = import_zod_openapi20.z.object({
+  prev: import_zod_openapi20.z.number().nullable(),
+  next: import_zod_openapi20.z.number().nullable(),
+  offset: import_zod_openapi20.z.number()
 });
-var ListPagesResponseSchema = import_zod_openapi19.z.object({
-  pages: import_zod_openapi19.z.array(PageSchema),
+var ListPagesResponseSchema = import_zod_openapi20.z.object({
+  pages: import_zod_openapi20.z.array(PageSchema),
   pager: PagerSchema,
   portalPage: PageSchema.nullable().optional(),
   // When listing a portal path (`/foo/`) that has NO portal document of
@@ -1693,208 +1722,208 @@ var ListPagesResponseSchema = import_zod_openapi19.z.object({
   // listings.
   contentPage: PageSchema.nullable().optional()
 });
-var PageChildSegmentSchema = import_zod_openapi19.z.object({
+var PageChildSegmentSchema = import_zod_openapi20.z.object({
   // The bare segment name immediately under the queried path
   // (e.g. 'rfc' for /crowi/rfc/... when querying /crowi/).
-  segment: import_zod_openapi19.z.string(),
+  segment: import_zod_openapi20.z.string(),
   // Portal-style path for this segment (always trailing-slashed),
   // e.g. '/crowi/rfc/'. Drop the trailing slash for the page path when
   // the segment is a leaf page (see `isPage`).
-  path: import_zod_openapi19.z.string(),
+  path: import_zod_openapi20.z.string(),
   // True when a real page is saved at the segment path itself
   // (e.g. `/crowi/rfc`, no trailing slash) — i.e. the segment is a
   // navigable page, not only an inferred directory.
-  isPage: import_zod_openapi19.z.boolean(),
+  isPage: import_zod_openapi20.z.boolean(),
   // True when a real portal page is saved at `path` (→ compass icon).
-  hasPortal: import_zod_openapi19.z.boolean(),
+  hasPortal: import_zod_openapi20.z.boolean(),
   // Number of descendant content pages strictly under this segment
   // (excludes the segment's own page / portal docs). A rough "how much
   // lives here" hint; > 0 means the segment is an expandable directory.
-  count: import_zod_openapi19.z.number()
+  count: import_zod_openapi20.z.number()
 });
-var ListPageChildrenRequestSchema = import_zod_openapi19.z.object({
+var ListPageChildrenRequestSchema = import_zod_openapi20.z.object({
   // Portal path to list children of. Trailing slash optional — the
   // handler normalises it. '/' lists the top-level segments.
-  path: import_zod_openapi19.z.string()
+  path: import_zod_openapi20.z.string()
 });
-var ListPageChildrenResponseSchema = import_zod_openapi19.z.object({
+var ListPageChildrenResponseSchema = import_zod_openapi20.z.object({
   // Sorted alphabetically by segment.
-  children: import_zod_openapi19.z.array(PageChildSegmentSchema)
-});
-var CreatePageRequestSchema = import_zod_openapi19.z.object({
-  path: import_zod_openapi19.z.string(),
-  body: import_zod_openapi19.z.string(),
-  grant: import_zod_openapi19.z.number().optional()
-});
-var UpdatePageRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string(),
-  body: import_zod_openapi19.z.string(),
-  revision_id: import_zod_openapi19.z.string().optional(),
-  grant: import_zod_openapi19.z.number().optional()
-});
-var RevertToRevisionRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string(),
-  revision_id: import_zod_openapi19.z.string()
-});
-var SetPageGrantRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string(),
-  grant: import_zod_openapi19.z.number().int()
-});
-var RenamePageRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string(),
-  new_path: import_zod_openapi19.z.string(),
-  revision_id: import_zod_openapi19.z.string().optional(),
-  create_redirect: import_zod_openapi19.z.boolean().optional(),
+  children: import_zod_openapi20.z.array(PageChildSegmentSchema)
+});
+var CreatePageRequestSchema = import_zod_openapi20.z.object({
+  path: import_zod_openapi20.z.string(),
+  body: import_zod_openapi20.z.string(),
+  grant: import_zod_openapi20.z.number().optional()
+});
+var UpdatePageRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string(),
+  body: import_zod_openapi20.z.string(),
+  revision_id: import_zod_openapi20.z.string().optional(),
+  grant: import_zod_openapi20.z.number().optional()
+});
+var RevertToRevisionRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string(),
+  revision_id: import_zod_openapi20.z.string()
+});
+var SetPageGrantRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string(),
+  grant: import_zod_openapi20.z.number().int()
+});
+var RenamePageRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string(),
+  new_path: import_zod_openapi20.z.string(),
+  revision_id: import_zod_openapi20.z.string().optional(),
+  create_redirect: import_zod_openapi20.z.boolean().optional(),
   // When true, rename the page together with its whole (grant-visible)
   // descendant subtree (renameTree) instead of just the single page.
   // Defaults to false — the single-page rename behaviour.
-  include_descendants: import_zod_openapi19.z.boolean().optional()
+  include_descendants: import_zod_openapi20.z.boolean().optional()
 });
-var RenamePageResponseSchema = import_zod_openapi19.z.object({
+var RenamePageResponseSchema = import_zod_openapi20.z.object({
   page: PageSchema,
-  renamed_count: import_zod_openapi19.z.number()
-});
-var RenameTreeErrorSchema = import_zod_openapi19.z.object({
-  error: import_zod_openapi19.z.object({
-    code: import_zod_openapi19.z.literal("PAGE_RENAME_TREE_FAILED"),
-    message: import_zod_openapi19.z.string(),
-    conflicts: import_zod_openapi19.z.array(
-      import_zod_openapi19.z.object({
-        path: import_zod_openapi19.z.string(),
-        reasons: import_zod_openapi19.z.array(import_zod_openapi19.z.string())
+  renamed_count: import_zod_openapi20.z.number()
+});
+var RenameTreeErrorSchema = import_zod_openapi20.z.object({
+  error: import_zod_openapi20.z.object({
+    code: import_zod_openapi20.z.literal("PAGE_RENAME_TREE_FAILED"),
+    message: import_zod_openapi20.z.string(),
+    conflicts: import_zod_openapi20.z.array(
+      import_zod_openapi20.z.object({
+        path: import_zod_openapi20.z.string(),
+        reasons: import_zod_openapi20.z.array(import_zod_openapi20.z.string())
       })
     ),
     // True when the failure happened after some pages were already moved
     // (non-transactional best-effort). When omitted/false the failure was
     // detected up-front and nothing was moved.
-    partial: import_zod_openapi19.z.boolean().optional()
+    partial: import_zod_openapi20.z.boolean().optional()
   })
 });
-var RenameSubtreeRequestSchema = import_zod_openapi19.z.object({
-  old_path: import_zod_openapi19.z.string(),
-  new_path: import_zod_openapi19.z.string(),
-  create_redirect: import_zod_openapi19.z.boolean().optional()
+var RenameSubtreeRequestSchema = import_zod_openapi20.z.object({
+  old_path: import_zod_openapi20.z.string(),
+  new_path: import_zod_openapi20.z.string(),
+  create_redirect: import_zod_openapi20.z.boolean().optional()
 });
-var RenameSubtreeResponseSchema = import_zod_openapi19.z.object({
-  renamed_count: import_zod_openapi19.z.number()
+var RenameSubtreeResponseSchema = import_zod_openapi20.z.object({
+  renamed_count: import_zod_openapi20.z.number()
 });
-var PageNotFoundErrorSchema = import_zod_openapi19.z.object({
-  error: import_zod_openapi19.z.object({
-    code: import_zod_openapi19.z.literal("PAGE_NOT_FOUND"),
-    message: import_zod_openapi19.z.literal("Page not found")
+var PageNotFoundErrorSchema = import_zod_openapi20.z.object({
+  error: import_zod_openapi20.z.object({
+    code: import_zod_openapi20.z.literal("PAGE_NOT_FOUND"),
+    message: import_zod_openapi20.z.literal("Page not found")
   })
 });
-var PageNotGrantedErrorSchema = import_zod_openapi19.z.object({
-  error: import_zod_openapi19.z.object({
-    code: import_zod_openapi19.z.literal("PAGE_NOT_GRANTED"),
-    message: import_zod_openapi19.z.literal("Page is not granted for the user")
+var PageNotGrantedErrorSchema = import_zod_openapi20.z.object({
+  error: import_zod_openapi20.z.object({
+    code: import_zod_openapi20.z.literal("PAGE_NOT_GRANTED"),
+    message: import_zod_openapi20.z.literal("Page is not granted for the user")
   })
 });
-var PageRevisionErrorSchema = import_zod_openapi19.z.object({
-  error: import_zod_openapi19.z.object({
-    code: import_zod_openapi19.z.literal("PAGE_REVISION_ERROR"),
-    message: import_zod_openapi19.z.string()
+var PageRevisionErrorSchema = import_zod_openapi20.z.object({
+  error: import_zod_openapi20.z.object({
+    code: import_zod_openapi20.z.literal("PAGE_REVISION_ERROR"),
+    message: import_zod_openapi20.z.string()
   })
 });
-var SeenPageRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string()
+var SeenPageRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string()
 });
-var SeenUsersResponseSchema = import_zod_openapi19.z.object({
-  seenUsers: import_zod_openapi19.z.array(UserPublicSchema),
-  seenUsersCount: import_zod_openapi19.z.number()
+var SeenUsersResponseSchema = import_zod_openapi20.z.object({
+  seenUsers: import_zod_openapi20.z.array(UserPublicSchema),
+  seenUsersCount: import_zod_openapi20.z.number()
 });
-var GetSeenUsersRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string(),
+var GetSeenUsersRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string(),
   // Optional cap on returned `seenUsers`. `seenUsersCount` always reflects
   // the full count regardless of `limit`. Omit for the full list.
-  limit: import_zod_openapi19.z.coerce.number().int().positive().optional()
+  limit: import_zod_openapi20.z.coerce.number().int().positive().optional()
 });
-var GetWatchStatusRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string()
+var GetWatchStatusRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string()
 });
-var WatchStatusResponseSchema = import_zod_openapi19.z.object({
-  watching: import_zod_openapi19.z.boolean()
+var WatchStatusResponseSchema = import_zod_openapi20.z.object({
+  watching: import_zod_openapi20.z.boolean()
 });
-var SetWatchStatusRequestSchema = import_zod_openapi19.z.object({
-  page_id: import_zod_openapi19.z.string(),
-  watching: import_zod_openapi19.z.boolean()
+var SetWatchStatusRequestSchema = import_zod_openapi20.z.object({
+  page_id: import_zod_openapi20.z.string(),
+  watching: import_zod_openapi20.z.boolean()
 });
 
 // src/schemas/me.ts
-var LanguageSchema = import_zod_openapi20.z.enum(["en", "ja"]);
-var ThemeSchema = import_zod_openapi20.z.enum(["system", "light", "dark"]);
-var UserProfileResponseSchema = import_zod_openapi20.z.object({
-  id: import_zod_openapi20.z.string(),
-  username: import_zod_openapi20.z.string(),
-  name: import_zod_openapi20.z.string(),
-  email: import_zod_openapi20.z.string().email(),
+var LanguageSchema = import_zod_openapi21.z.enum(["en", "ja"]);
+var ThemeSchema = import_zod_openapi21.z.enum(["system", "light", "dark"]);
+var UserProfileResponseSchema = import_zod_openapi21.z.object({
+  id: import_zod_openapi21.z.string(),
+  username: import_zod_openapi21.z.string(),
+  name: import_zod_openapi21.z.string(),
+  email: import_zod_openapi21.z.string().email(),
   lang: LanguageSchema,
   theme: ThemeSchema,
-  image: import_zod_openapi20.z.string().nullable(),
-  introduction: import_zod_openapi20.z.string().optional(),
-  hasPassword: import_zod_openapi20.z.boolean(),
-  createdAt: import_zod_openapi20.z.string(),
+  image: import_zod_openapi21.z.string().nullable(),
+  introduction: import_zod_openapi21.z.string().optional(),
+  hasPassword: import_zod_openapi21.z.boolean(),
+  createdAt: import_zod_openapi21.z.string(),
   /**
    * True when the profile update requested a new email that is awaiting
    * confirmation: the stored `email` is unchanged and a confirmation
    * link was sent to the new address.
    */
-  emailChangePending: import_zod_openapi20.z.boolean().optional()
+  emailChangePending: import_zod_openapi21.z.boolean().optional()
 });
-var UpdateProfileRequestSchema = import_zod_openapi20.z.object({
-  userForm: import_zod_openapi20.z.object({
-    name: import_zod_openapi20.z.string().min(1, "Name is required"),
-    email: import_zod_openapi20.z.string().email("Invalid email format"),
+var UpdateProfileRequestSchema = import_zod_openapi21.z.object({
+  userForm: import_zod_openapi21.z.object({
+    name: import_zod_openapi21.z.string().min(1, "Name is required"),
+    email: import_zod_openapi21.z.string().email("Invalid email format"),
     lang: LanguageSchema
   })
 });
-var UpdateThemeRequestSchema = import_zod_openapi20.z.object({
+var UpdateThemeRequestSchema = import_zod_openapi21.z.object({
   theme: ThemeSchema
 });
-var ThemeUpdateResponseSchema = import_zod_openapi20.z.object({
-  status: import_zod_openapi20.z.literal("ok"),
+var ThemeUpdateResponseSchema = import_zod_openapi21.z.object({
+  status: import_zod_openapi21.z.literal("ok"),
   theme: ThemeSchema
 });
-var PictureUploadResponseSchema = import_zod_openapi20.z.object({
-  status: import_zod_openapi20.z.boolean(),
-  url: import_zod_openapi20.z.string().optional(),
-  message: import_zod_openapi20.z.string().optional()
+var PictureUploadResponseSchema = import_zod_openapi21.z.object({
+  status: import_zod_openapi21.z.boolean(),
+  url: import_zod_openapi21.z.string().optional(),
+  message: import_zod_openapi21.z.string().optional()
 });
-var SuccessResponseSchema = import_zod_openapi20.z.object({
-  status: import_zod_openapi20.z.literal("ok"),
-  message: import_zod_openapi20.z.string().optional()
+var SuccessResponseSchema = import_zod_openapi21.z.object({
+  status: import_zod_openapi21.z.literal("ok"),
+  message: import_zod_openapi21.z.string().optional()
 });
-var ProfileErrorResponseSchema = import_zod_openapi20.z.object({
-  status: import_zod_openapi20.z.literal("error"),
+var ProfileErrorResponseSchema = import_zod_openapi21.z.object({
+  status: import_zod_openapi21.z.literal("error"),
   /** Stable code so the web can localize the message (e.g. EMAIL_TAKEN). */
-  code: import_zod_openapi20.z.string().optional(),
-  message: import_zod_openapi20.z.string().optional(),
-  errors: import_zod_openapi20.z.array(import_zod_openapi20.z.string()).optional()
+  code: import_zod_openapi21.z.string().optional(),
+  message: import_zod_openapi21.z.string().optional(),
+  errors: import_zod_openapi21.z.array(import_zod_openapi21.z.string()).optional()
 });
 var PASSWORD_REGEX = /^(?=.*[a-zA-Z])(?=.*\d)(?=.*[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?`~])[a-zA-Z\d!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?`~]+$/;
-var UpdatePasswordRequestSchema = import_zod_openapi20.z.object({
-  oldPassword: import_zod_openapi20.z.string().optional(),
-  newPassword: import_zod_openapi20.z.string().min(8, "Password must be at least 8 characters").max(100, "Password must be at most 100 characters").regex(PASSWORD_REGEX, "Password must contain at least one letter, one digit, and one special character"),
-  newPasswordConfirm: import_zod_openapi20.z.string()
+var UpdatePasswordRequestSchema = import_zod_openapi21.z.object({
+  oldPassword: import_zod_openapi21.z.string().optional(),
+  newPassword: import_zod_openapi21.z.string().min(8, "Password must be at least 8 characters").max(100, "Password must be at most 100 characters").regex(PASSWORD_REGEX, "Password must contain at least one letter, one digit, and one special character"),
+  newPasswordConfirm: import_zod_openapi21.z.string()
 }).refine((data) => data.newPassword === data.newPasswordConfirm, {
   message: "Passwords do not match",
   path: ["newPasswordConfirm"]
 });
-var PasswordUpdateSuccessSchema = import_zod_openapi20.z.object({
-  status: import_zod_openapi20.z.literal("ok"),
-  message: import_zod_openapi20.z.string()
+var PasswordUpdateSuccessSchema = import_zod_openapi21.z.object({
+  status: import_zod_openapi21.z.literal("ok"),
+  message: import_zod_openapi21.z.string()
 });
-var PasswordErrorResponseSchema = import_zod_openapi20.z.object({
-  status: import_zod_openapi20.z.literal("error"),
-  message: import_zod_openapi20.z.string(),
-  errors: import_zod_openapi20.z.array(import_zod_openapi20.z.string()).optional()
+var PasswordErrorResponseSchema = import_zod_openapi21.z.object({
+  status: import_zod_openapi21.z.literal("error"),
+  message: import_zod_openapi21.z.string(),
+  errors: import_zod_openapi21.z.array(import_zod_openapi21.z.string()).optional()
 });
-var RecentlyViewedPagesResponseSchema = import_zod_openapi20.z.object({
-  pages: import_zod_openapi20.z.array(PageSchema)
+var RecentlyViewedPagesResponseSchema = import_zod_openapi21.z.object({
+  pages: import_zod_openapi21.z.array(PageSchema)
 });
 
 // src/contracts/me.ts
-var getProfileRoute = (0, import_zod_openapi21.createRoute)({
+var getProfileRoute = (0, import_zod_openapi22.createRoute)({
   method: "get",
   path: "/me",
   tags: ["me"],
@@ -1911,7 +1940,7 @@ var getProfileRoute = (0, import_zod_openapi21.createRoute)({
     }
   }
 });
-var updateProfileRoute = (0, import_zod_openapi21.createRoute)({
+var updateProfileRoute = (0, import_zod_openapi22.createRoute)({
   method: "put",
   path: "/me",
   tags: ["me"],
@@ -1937,7 +1966,7 @@ var updateProfileRoute = (0, import_zod_openapi21.createRoute)({
     }
   }
 });
-var updateThemeRoute = (0, import_zod_openapi21.createRoute)({
+var updateThemeRoute = (0, import_zod_openapi22.createRoute)({
   method: "patch",
   path: "/me/theme",
   tags: ["me"],
@@ -1963,7 +1992,7 @@ var updateThemeRoute = (0, import_zod_openapi21.createRoute)({
     }
   }
 });
-var uploadPictureRoute = (0, import_zod_openapi21.createRoute)({
+var uploadPictureRoute = (0, import_zod_openapi22.createRoute)({
   method: "post",
   path: "/me/picture",
   tags: ["me"],
@@ -1973,8 +2002,8 @@ var uploadPictureRoute = (0, import_zod_openapi21.createRoute)({
     body: {
       content: {
         "multipart/form-data": {
-          schema: import_zod_openapi21.z.object({
-            file: import_zod_openapi21.z.any().optional().describe("Profile picture file")
+          schema: import_zod_openapi22.z.object({
+            file: import_zod_openapi22.z.any().optional().describe("Profile picture file")
           })
         }
       }
@@ -1995,7 +2024,7 @@ var uploadPictureRoute = (0, import_zod_openapi21.createRoute)({
     }
   }
 });
-var deletePictureRoute = (0, import_zod_openapi21.createRoute)({
+var deletePictureRoute = (0, import_zod_openapi22.createRoute)({
   method: "delete",
   path: "/me/picture",
   tags: ["me"],
@@ -2016,7 +2045,7 @@ var deletePictureRoute = (0, import_zod_openapi21.createRoute)({
     }
   }
 });
-var updatePasswordRoute = (0, import_zod_openapi21.createRoute)({
+var updatePasswordRoute = (0, import_zod_openapi22.createRoute)({
   method: "put",
   path: "/me/password",
   tags: ["me"],
@@ -2042,7 +2071,7 @@ var updatePasswordRoute = (0, import_zod_openapi21.createRoute)({
     }
   }
 });
-var recentlyViewedPagesRoute = (0, import_zod_openapi21.createRoute)({
+var recentlyViewedPagesRoute = (0, import_zod_openapi22.createRoute)({
   method: "get",
   path: "/me/recently-viewed-pages",
   tags: ["me"],
@@ -2074,43 +2103,43 @@ var meRoutes = {
 };
 
 // src/contracts/access-token.ts
-var import_zod_openapi23 = require("@hono/zod-openapi");
+var import_zod_openapi24 = require("@hono/zod-openapi");
 
 // src/schemas/access-token.ts
-var import_zod_openapi22 = require("@hono/zod-openapi");
-var AccessTokenSchema = import_zod_openapi22.z.object({
-  id: import_zod_openapi22.z.string(),
-  name: import_zod_openapi22.z.string(),
-  scopes: import_zod_openapi22.z.array(import_zod_openapi22.z.string()),
+var import_zod_openapi23 = require("@hono/zod-openapi");
+var AccessTokenSchema = import_zod_openapi23.z.object({
+  id: import_zod_openapi23.z.string(),
+  name: import_zod_openapi23.z.string(),
+  scopes: import_zod_openapi23.z.array(import_zod_openapi23.z.string()),
   /** ISO-8601 expiry, or `null` for a non-expiring token. */
-  expiresAt: import_zod_openapi22.z.string().nullable(),
+  expiresAt: import_zod_openapi23.z.string().nullable(),
   /** ISO-8601 of last successful use, or `null` if never used. */
-  lastUsedAt: import_zod_openapi22.z.string().nullable(),
-  createdAt: import_zod_openapi22.z.string()
+  lastUsedAt: import_zod_openapi23.z.string().nullable(),
+  createdAt: import_zod_openapi23.z.string()
 });
-var ListAccessTokensResponseSchema = import_zod_openapi22.z.object({
-  accessTokens: import_zod_openapi22.z.array(AccessTokenSchema)
+var ListAccessTokensResponseSchema = import_zod_openapi23.z.object({
+  accessTokens: import_zod_openapi23.z.array(AccessTokenSchema)
 });
-var CreateAccessTokenRequestSchema = import_zod_openapi22.z.object({
-  name: import_zod_openapi22.z.string().min(1, "Name is required").max(200),
-  scopes: import_zod_openapi22.z.array(import_zod_openapi22.z.string()).min(1, "At least one scope is required"),
-  expiresAt: import_zod_openapi22.z.string().datetime().nullable().optional()
+var CreateAccessTokenRequestSchema = import_zod_openapi23.z.object({
+  name: import_zod_openapi23.z.string().min(1, "Name is required").max(200),
+  scopes: import_zod_openapi23.z.array(import_zod_openapi23.z.string()).min(1, "At least one scope is required"),
+  expiresAt: import_zod_openapi23.z.string().datetime().nullable().optional()
 });
 var CreateAccessTokenResponseSchema = AccessTokenSchema.extend({
-  token: import_zod_openapi22.z.string()
-});
-var InvalidScopeErrorSchema = import_zod_openapi22.z.object({
-  error: import_zod_openapi22.z.object({
-    code: import_zod_openapi22.z.literal("INVALID_SCOPE"),
-    message: import_zod_openapi22.z.string(),
-    details: import_zod_openapi22.z.object({
-      invalidScopes: import_zod_openapi22.z.array(import_zod_openapi22.z.string())
+  token: import_zod_openapi23.z.string()
+});
+var InvalidScopeErrorSchema = import_zod_openapi23.z.object({
+  error: import_zod_openapi23.z.object({
+    code: import_zod_openapi23.z.literal("INVALID_SCOPE"),
+    message: import_zod_openapi23.z.string(),
+    details: import_zod_openapi23.z.object({
+      invalidScopes: import_zod_openapi23.z.array(import_zod_openapi23.z.string())
     }).optional()
   })
 });
 
 // src/contracts/access-token.ts
-var listAccessTokensRoute = (0, import_zod_openapi23.createRoute)({
+var listAccessTokensRoute = (0, import_zod_openapi24.createRoute)({
   method: "get",
   path: "/me/access-tokens",
   tags: ["me"],
@@ -2135,7 +2164,7 @@ var listAccessTokensRoute = (0, import_zod_openapi23.createRoute)({
     }
   }
 });
-var createAccessTokenRoute = (0, import_zod_openapi23.createRoute)({
+var createAccessTokenRoute = (0, import_zod_openapi24.createRoute)({
   method: "post",
   path: "/me/access-tokens",
   tags: ["me"],
@@ -2169,14 +2198,14 @@ var createAccessTokenRoute = (0, import_zod_openapi23.createRoute)({
     }
   }
 });
-var deleteAccessTokenRoute = (0, import_zod_openapi23.createRoute)({
+var deleteAccessTokenRoute = (0, import_zod_openapi24.createRoute)({
   method: "delete",
   path: "/me/access-tokens/{id}",
   tags: ["me"],
   security: [{ bearerAuth: [] }],
   summary: "Revoke a personal access token",
   request: {
-    params: import_zod_openapi23.z.object({ id: import_zod_openapi23.z.string() })
+    params: import_zod_openapi24.z.object({ id: import_zod_openapi24.z.string() })
   },
   responses: {
     200: {
@@ -2208,13 +2237,13 @@ var accessTokenRoutes = {
 };
 
 // src/contracts/oauth.ts
-var import_zod_openapi26 = require("@hono/zod-openapi");
+var import_zod_openapi27 = require("@hono/zod-openapi");
 
 // src/schemas/oauth-endpoints.ts
-var import_zod_openapi25 = require("@hono/zod-openapi");
+var import_zod_openapi26 = require("@hono/zod-openapi");
 
 // src/schemas/oauth.ts
-var import_zod_openapi24 = require("@hono/zod-openapi");
+var import_zod_openapi25 = require("@hono/zod-openapi");
 var SCOPES = [
   // umbrella
   "read",
@@ -2282,11 +2311,11 @@ function scopeSatisfies(required, granted) {
   return false;
 }
 var InsufficientScopeErrorSchema = ApiErrorSchema.extend({
-  error: import_zod_openapi24.z.object({
-    code: import_zod_openapi24.z.literal("INSUFFICIENT_SCOPE"),
-    message: import_zod_openapi24.z.string(),
-    details: import_zod_openapi24.z.object({
-      requiredScope: import_zod_openapi24.z.string()
+  error: import_zod_openapi25.z.object({
+    code: import_zod_openapi25.z.literal("INSUFFICIENT_SCOPE"),
+    message: import_zod_openapi25.z.string(),
+    details: import_zod_openapi25.z.object({
+      requiredScope: import_zod_openapi25.z.string()
     }).optional()
   })
 });
@@ -2305,96 +2334,96 @@ var OAUTH_ERROR_CODES = [
   "slow_down",
   "expired_token"
 ];
-var OAuthErrorSchema = import_zod_openapi25.z.object({
-  error: import_zod_openapi25.z.enum(OAUTH_ERROR_CODES),
-  error_description: import_zod_openapi25.z.string().optional()
-});
-var AuthorizeRequestSchema = import_zod_openapi25.z.object({
-  client_id: import_zod_openapi25.z.string().min(1),
-  redirect_uri: import_zod_openapi25.z.string().min(1),
-  scope: import_zod_openapi25.z.string().min(1),
-  code_challenge: import_zod_openapi25.z.string().min(1),
-  code_challenge_method: import_zod_openapi25.z.literal("S256"),
-  state: import_zod_openapi25.z.string().optional()
-});
-var AuthorizeResponseSchema = import_zod_openapi25.z.object({
-  redirectUri: import_zod_openapi25.z.string()
-});
-var TokenRequestSchema = import_zod_openapi25.z.discriminatedUnion("grant_type", [
-  import_zod_openapi25.z.object({
-    grant_type: import_zod_openapi25.z.literal("authorization_code"),
-    code: import_zod_openapi25.z.string().min(1),
-    code_verifier: import_zod_openapi25.z.string().min(1),
-    redirect_uri: import_zod_openapi25.z.string().min(1),
-    client_id: import_zod_openapi25.z.string().min(1)
+var OAuthErrorSchema = import_zod_openapi26.z.object({
+  error: import_zod_openapi26.z.enum(OAUTH_ERROR_CODES),
+  error_description: import_zod_openapi26.z.string().optional()
+});
+var AuthorizeRequestSchema = import_zod_openapi26.z.object({
+  client_id: import_zod_openapi26.z.string().min(1),
+  redirect_uri: import_zod_openapi26.z.string().min(1),
+  scope: import_zod_openapi26.z.string().min(1),
+  code_challenge: import_zod_openapi26.z.string().min(1),
+  code_challenge_method: import_zod_openapi26.z.literal("S256"),
+  state: import_zod_openapi26.z.string().optional()
+});
+var AuthorizeResponseSchema = import_zod_openapi26.z.object({
+  redirectUri: import_zod_openapi26.z.string()
+});
+var TokenRequestSchema = import_zod_openapi26.z.discriminatedUnion("grant_type", [
+  import_zod_openapi26.z.object({
+    grant_type: import_zod_openapi26.z.literal("authorization_code"),
+    code: import_zod_openapi26.z.string().min(1),
+    code_verifier: import_zod_openapi26.z.string().min(1),
+    redirect_uri: import_zod_openapi26.z.string().min(1),
+    client_id: import_zod_openapi26.z.string().min(1)
   }),
-  import_zod_openapi25.z.object({
-    grant_type: import_zod_openapi25.z.literal("refresh_token"),
-    refresh_token: import_zod_openapi25.z.string().min(1),
-    client_id: import_zod_openapi25.z.string().min(1),
-    scope: import_zod_openapi25.z.string().optional()
+  import_zod_openapi26.z.object({
+    grant_type: import_zod_openapi26.z.literal("refresh_token"),
+    refresh_token: import_zod_openapi26.z.string().min(1),
+    client_id: import_zod_openapi26.z.string().min(1),
+    scope: import_zod_openapi26.z.string().optional()
   }),
   // RFC 8628 §3.4 — device authorization grant. The client polls with the
   // opaque `device_code` returned by `/oauth/device/authorize`.
-  import_zod_openapi25.z.object({
-    grant_type: import_zod_openapi25.z.literal("urn:ietf:params:oauth:grant-type:device_code"),
-    device_code: import_zod_openapi25.z.string().min(1),
-    client_id: import_zod_openapi25.z.string().min(1)
+  import_zod_openapi26.z.object({
+    grant_type: import_zod_openapi26.z.literal("urn:ietf:params:oauth:grant-type:device_code"),
+    device_code: import_zod_openapi26.z.string().min(1),
+    client_id: import_zod_openapi26.z.string().min(1)
   })
 ]);
 var DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
-var TokenResponseSchema = import_zod_openapi25.z.object({
-  access_token: import_zod_openapi25.z.string(),
-  token_type: import_zod_openapi25.z.literal("Bearer"),
-  expires_in: import_zod_openapi25.z.number(),
-  refresh_token: import_zod_openapi25.z.string(),
-  scope: import_zod_openapi25.z.string()
-});
-var RevokeRequestSchema = import_zod_openapi25.z.object({
-  token: import_zod_openapi25.z.string().min(1),
-  token_type_hint: import_zod_openapi25.z.string().optional()
-});
-var RevokeResponseSchema = import_zod_openapi25.z.object({});
-var DeviceAuthorizeRequestSchema = import_zod_openapi25.z.object({
-  client_id: import_zod_openapi25.z.string().min(1),
-  scope: import_zod_openapi25.z.string().min(1)
-});
-var DeviceAuthorizeResponseSchema = import_zod_openapi25.z.object({
-  device_code: import_zod_openapi25.z.string(),
-  user_code: import_zod_openapi25.z.string(),
-  verification_uri: import_zod_openapi25.z.string(),
-  verification_uri_complete: import_zod_openapi25.z.string(),
-  expires_in: import_zod_openapi25.z.number(),
-  interval: import_zod_openapi25.z.number()
-});
-var DeviceVerifyRequestSchema = import_zod_openapi25.z.object({
-  user_code: import_zod_openapi25.z.string().min(1),
-  action: import_zod_openapi25.z.enum(["approve", "deny"])
-});
-var DeviceVerifyResponseSchema = import_zod_openapi25.z.object({
-  status: import_zod_openapi25.z.enum(["approved", "denied"])
-});
-var DeviceInfoResponseSchema = import_zod_openapi25.z.object({
-  client_id: import_zod_openapi25.z.string(),
-  scopes: import_zod_openapi25.z.array(import_zod_openapi25.z.string())
+var TokenResponseSchema = import_zod_openapi26.z.object({
+  access_token: import_zod_openapi26.z.string(),
+  token_type: import_zod_openapi26.z.literal("Bearer"),
+  expires_in: import_zod_openapi26.z.number(),
+  refresh_token: import_zod_openapi26.z.string(),
+  scope: import_zod_openapi26.z.string()
+});
+var RevokeRequestSchema = import_zod_openapi26.z.object({
+  token: import_zod_openapi26.z.string().min(1),
+  token_type_hint: import_zod_openapi26.z.string().optional()
+});
+var RevokeResponseSchema = import_zod_openapi26.z.object({});
+var DeviceAuthorizeRequestSchema = import_zod_openapi26.z.object({
+  client_id: import_zod_openapi26.z.string().min(1),
+  scope: import_zod_openapi26.z.string().min(1)
+});
+var DeviceAuthorizeResponseSchema = import_zod_openapi26.z.object({
+  device_code: import_zod_openapi26.z.string(),
+  user_code: import_zod_openapi26.z.string(),
+  verification_uri: import_zod_openapi26.z.string(),
+  verification_uri_complete: import_zod_openapi26.z.string(),
+  expires_in: import_zod_openapi26.z.number(),
+  interval: import_zod_openapi26.z.number()
+});
+var DeviceVerifyRequestSchema = import_zod_openapi26.z.object({
+  user_code: import_zod_openapi26.z.string().min(1),
+  action: import_zod_openapi26.z.enum(["approve", "deny"])
+});
+var DeviceVerifyResponseSchema = import_zod_openapi26.z.object({
+  status: import_zod_openapi26.z.enum(["approved", "denied"])
+});
+var DeviceInfoResponseSchema = import_zod_openapi26.z.object({
+  client_id: import_zod_openapi26.z.string(),
+  scopes: import_zod_openapi26.z.array(import_zod_openapi26.z.string())
 });
 var GRANT_TYPES_SUPPORTED = ["authorization_code", "refresh_token", DEVICE_CODE_GRANT_TYPE];
-var DiscoveryResponseSchema = import_zod_openapi25.z.object({
-  issuer: import_zod_openapi25.z.string(),
-  authorization_endpoint: import_zod_openapi25.z.string(),
-  token_endpoint: import_zod_openapi25.z.string(),
-  revocation_endpoint: import_zod_openapi25.z.string(),
-  device_authorization_endpoint: import_zod_openapi25.z.string().optional(),
-  scopes_supported: import_zod_openapi25.z.array(import_zod_openapi25.z.string()),
-  response_types_supported: import_zod_openapi25.z.array(import_zod_openapi25.z.string()),
-  grant_types_supported: import_zod_openapi25.z.array(import_zod_openapi25.z.string()),
-  code_challenge_methods_supported: import_zod_openapi25.z.array(import_zod_openapi25.z.string()),
-  token_endpoint_auth_methods_supported: import_zod_openapi25.z.array(import_zod_openapi25.z.string())
+var DiscoveryResponseSchema = import_zod_openapi26.z.object({
+  issuer: import_zod_openapi26.z.string(),
+  authorization_endpoint: import_zod_openapi26.z.string(),
+  token_endpoint: import_zod_openapi26.z.string(),
+  revocation_endpoint: import_zod_openapi26.z.string(),
+  device_authorization_endpoint: import_zod_openapi26.z.string().optional(),
+  scopes_supported: import_zod_openapi26.z.array(import_zod_openapi26.z.string()),
+  response_types_supported: import_zod_openapi26.z.array(import_zod_openapi26.z.string()),
+  grant_types_supported: import_zod_openapi26.z.array(import_zod_openapi26.z.string()),
+  code_challenge_methods_supported: import_zod_openapi26.z.array(import_zod_openapi26.z.string()),
+  token_endpoint_auth_methods_supported: import_zod_openapi26.z.array(import_zod_openapi26.z.string())
 });
 var DISCOVERY_SCOPES_SUPPORTED = ISSUABLE_SCOPES;
 
 // src/contracts/oauth.ts
-var authorizeRoute = (0, import_zod_openapi26.createRoute)({
+var authorizeRoute = (0, import_zod_openapi27.createRoute)({
   method: "post",
   path: "/oauth/authorize",
   tags: ["oauth"],
@@ -2424,7 +2453,7 @@ var authorizeRoute = (0, import_zod_openapi26.createRoute)({
     }
   }
 });
-var tokenRoute = (0, import_zod_openapi26.createRoute)({
+var tokenRoute = (0, import_zod_openapi27.createRoute)({
   method: "post",
   path: "/oauth/token",
   tags: ["oauth"],
@@ -2456,7 +2485,7 @@ var tokenRoute = (0, import_zod_openapi26.createRoute)({
     }
   }
 });
-var revokeRoute = (0, import_zod_openapi26.createRoute)({
+var revokeRoute = (0, import_zod_openapi27.createRoute)({
   method: "post",
   path: "/oauth/revoke",
   tags: ["oauth"],
@@ -2476,7 +2505,7 @@ var revokeRoute = (0, import_zod_openapi26.createRoute)({
     }
   }
 });
-var discoveryRoute = (0, import_zod_openapi26.createRoute)({
+var discoveryRoute = (0, import_zod_openapi27.createRoute)({
   method: "get",
   path: "/.well-known/oauth-authorization-server",
   tags: ["oauth"],
@@ -2488,7 +2517,7 @@ var discoveryRoute = (0, import_zod_openapi26.createRoute)({
     }
   }
 });
-var deviceAuthorizeRoute = (0, import_zod_openapi26.createRoute)({
+var deviceAuthorizeRoute = (0, import_zod_openapi27.createRoute)({
   method: "post",
   path: "/oauth/device/authorize",
   tags: ["oauth"],
@@ -2516,7 +2545,7 @@ var deviceAuthorizeRoute = (0, import_zod_openapi26.createRoute)({
     }
   }
 });
-var deviceInfoRoute = (0, import_zod_openapi26.createRoute)({
+var deviceInfoRoute = (0, import_zod_openapi27.createRoute)({
   method: "get",
   path: "/oauth/device",
   tags: ["oauth"],
@@ -2525,7 +2554,7 @@ var deviceInfoRoute = (0, import_zod_openapi26.createRoute)({
   // scopes so the web consent screen can show them before approval. Reveals
   // no secret. Unknown / expired / non-pending → 404 (PHASE4-Q9 option A).
   request: {
-    query: import_zod_openapi26.z.object({ user_code: import_zod_openapi26.z.string().min(1) })
+    query: import_zod_openapi27.z.object({ user_code: import_zod_openapi27.z.string().min(1) })
   },
   responses: {
     200: {
@@ -2538,7 +2567,7 @@ var deviceInfoRoute = (0, import_zod_openapi26.createRoute)({
     }
   }
 });
-var deviceVerifyRoute = (0, import_zod_openapi26.createRoute)({
+var deviceVerifyRoute = (0, import_zod_openapi27.createRoute)({
   method: "post",
   path: "/oauth/device/verify",
   tags: ["oauth"],
@@ -2579,95 +2608,95 @@ var oauthRoutes = {
 };
 
 // src/contracts/user.ts
-var import_zod_openapi29 = require("@hono/zod-openapi");
+var import_zod_openapi30 = require("@hono/zod-openapi");
 
 // src/schemas/user.ts
-var import_zod_openapi28 = require("@hono/zod-openapi");
+var import_zod_openapi29 = require("@hono/zod-openapi");
 
 // src/schemas/bookmark.ts
-var import_zod_openapi27 = require("@hono/zod-openapi");
-var BookmarkSchema = import_zod_openapi27.z.object({
-  _id: import_zod_openapi27.z.string(),
+var import_zod_openapi28 = require("@hono/zod-openapi");
+var BookmarkSchema = import_zod_openapi28.z.object({
+  _id: import_zod_openapi28.z.string(),
   page: PageSchema,
-  user: import_zod_openapi27.z.union([import_zod_openapi27.z.string(), UserPublicSchema]),
-  createdAt: import_zod_openapi27.z.string()
+  user: import_zod_openapi28.z.union([import_zod_openapi28.z.string(), UserPublicSchema]),
+  createdAt: import_zod_openapi28.z.string()
 });
-var GetBookmarkRequestSchema = import_zod_openapi27.z.object({
-  page_id: import_zod_openapi27.z.string()
+var GetBookmarkRequestSchema = import_zod_openapi28.z.object({
+  page_id: import_zod_openapi28.z.string()
 });
-var BookmarkResponseSchema = import_zod_openapi27.z.object({
+var BookmarkResponseSchema = import_zod_openapi28.z.object({
   bookmark: BookmarkSchema.nullable()
 });
-var ListMyBookmarksResponseSchema = import_zod_openapi27.z.object({
-  bookmarks: import_zod_openapi27.z.array(BookmarkSchema),
+var ListMyBookmarksResponseSchema = import_zod_openapi28.z.object({
+  bookmarks: import_zod_openapi28.z.array(BookmarkSchema),
   pager: PagerSchema,
-  total: import_zod_openapi27.z.number()
+  total: import_zod_openapi28.z.number()
 });
-var AddBookmarkRequestSchema = import_zod_openapi27.z.object({
-  page_id: import_zod_openapi27.z.string()
+var AddBookmarkRequestSchema = import_zod_openapi28.z.object({
+  page_id: import_zod_openapi28.z.string()
 });
-var RemoveBookmarkRequestSchema = import_zod_openapi27.z.object({
-  page_id: import_zod_openapi27.z.string()
+var RemoveBookmarkRequestSchema = import_zod_openapi28.z.object({
+  page_id: import_zod_openapi28.z.string()
 });
-var RemoveBookmarkResponseSchema = import_zod_openapi27.z.object({
-  ok: import_zod_openapi27.z.literal(true)
+var RemoveBookmarkResponseSchema = import_zod_openapi28.z.object({
+  ok: import_zod_openapi28.z.literal(true)
 });
 
 // src/schemas/user.ts
-var UserStatusSchema = import_zod_openapi28.z.enum(["1", "2", "3", "4", "5"]).transform((val) => Number(val));
+var UserStatusSchema = import_zod_openapi29.z.enum(["1", "2", "3", "4", "5"]).transform((val) => Number(val));
 var UserStatusEnum = UserPublicStatus;
-var UserLanguageSchema = import_zod_openapi28.z.enum(["en", "ja"]);
-var PaginationRequestSchema = import_zod_openapi28.z.object({
-  limit: import_zod_openapi28.z.coerce.number().optional().default(50),
-  offset: import_zod_openapi28.z.coerce.number().optional().default(0)
-});
-var UserListItemSchema = import_zod_openapi28.z.object({
-  _id: import_zod_openapi28.z.string(),
-  username: import_zod_openapi28.z.string(),
-  name: import_zod_openapi28.z.string(),
-  image: import_zod_openapi28.z.string().nullable().optional()
-});
-var ListUsersRequestSchema = import_zod_openapi28.z.object({
-  q: import_zod_openapi28.z.string().optional(),
+var UserLanguageSchema = import_zod_openapi29.z.enum(["en", "ja"]);
+var PaginationRequestSchema = import_zod_openapi29.z.object({
+  limit: import_zod_openapi29.z.coerce.number().optional().default(50),
+  offset: import_zod_openapi29.z.coerce.number().optional().default(0)
+});
+var UserListItemSchema = import_zod_openapi29.z.object({
+  _id: import_zod_openapi29.z.string(),
+  username: import_zod_openapi29.z.string(),
+  name: import_zod_openapi29.z.string(),
+  image: import_zod_openapi29.z.string().nullable().optional()
+});
+var ListUsersRequestSchema = import_zod_openapi29.z.object({
+  q: import_zod_openapi29.z.string().optional(),
   // Cap the page size so a client can't request the whole user table in one
   // unbounded find+sort (mirrors the page-list `limit` guard).
-  limit: import_zod_openapi28.z.coerce.number().int().min(1).max(100).optional().default(24),
-  offset: import_zod_openapi28.z.coerce.number().int().min(0).optional().default(0)
+  limit: import_zod_openapi29.z.coerce.number().int().min(1).max(100).optional().default(24),
+  offset: import_zod_openapi29.z.coerce.number().int().min(0).optional().default(0)
 });
-var ListUsersResponseSchema = import_zod_openapi28.z.object({
-  users: import_zod_openapi28.z.array(UserListItemSchema),
+var ListUsersResponseSchema = import_zod_openapi29.z.object({
+  users: import_zod_openapi29.z.array(UserListItemSchema),
   pager: PagerSchema,
-  total: import_zod_openapi28.z.number()
+  total: import_zod_openapi29.z.number()
 });
-var UserPageResponseSchema = import_zod_openapi28.z.object({
+var UserPageResponseSchema = import_zod_openapi29.z.object({
   user: UserPublicSchema,
   // Page statistics
-  createdPagesCount: import_zod_openapi28.z.number(),
-  bookmarksCount: import_zod_openapi28.z.number(),
+  createdPagesCount: import_zod_openapi29.z.number(),
+  bookmarksCount: import_zod_openapi29.z.number(),
   // Optionally include recent items for initial display
-  recentPages: import_zod_openapi28.z.array(PageSchema).optional(),
-  recentBookmarks: import_zod_openapi28.z.array(BookmarkSchema).optional()
+  recentPages: import_zod_openapi29.z.array(PageSchema).optional(),
+  recentBookmarks: import_zod_openapi29.z.array(BookmarkSchema).optional()
 });
-var UserBookmarksResponseSchema = import_zod_openapi28.z.object({
-  bookmarks: import_zod_openapi28.z.array(BookmarkSchema),
+var UserBookmarksResponseSchema = import_zod_openapi29.z.object({
+  bookmarks: import_zod_openapi29.z.array(BookmarkSchema),
   pager: PagerSchema,
-  total: import_zod_openapi28.z.number()
+  total: import_zod_openapi29.z.number()
 });
-var UserPagesResponseSchema = import_zod_openapi28.z.object({
-  pages: import_zod_openapi28.z.array(PageSchema),
+var UserPagesResponseSchema = import_zod_openapi29.z.object({
+  pages: import_zod_openapi29.z.array(PageSchema),
   pager: PagerSchema,
-  total: import_zod_openapi28.z.number()
+  total: import_zod_openapi29.z.number()
 });
-var UserNotFoundErrorSchema = import_zod_openapi28.z.object({
-  error: import_zod_openapi28.z.object({
-    code: import_zod_openapi28.z.literal("USER_NOT_FOUND"),
-    message: import_zod_openapi28.z.literal("User not found")
+var UserNotFoundErrorSchema = import_zod_openapi29.z.object({
+  error: import_zod_openapi29.z.object({
+    code: import_zod_openapi29.z.literal("USER_NOT_FOUND"),
+    message: import_zod_openapi29.z.literal("User not found")
   })
 });
 
 // src/contracts/user.ts
-var UsernameParamSchema = import_zod_openapi29.z.object({ username: import_zod_openapi29.z.string() });
-var getUserPageRoute = (0, import_zod_openapi29.createRoute)({
+var UsernameParamSchema = import_zod_openapi30.z.object({ username: import_zod_openapi30.z.string() });
+var getUserPageRoute = (0, import_zod_openapi30.createRoute)({
   method: "get",
   path: "/user/{username}",
   tags: ["user"],
@@ -2695,7 +2724,7 @@ var getUserPageRoute = (0, import_zod_openapi29.createRoute)({
     }
   }
 });
-var getUserBookmarksRoute = (0, import_zod_openapi29.createRoute)({
+var getUserBookmarksRoute = (0, import_zod_openapi30.createRoute)({
   method: "get",
   path: "/user/{username}/bookmarks",
   tags: ["user"],
@@ -2724,7 +2753,7 @@ var getUserBookmarksRoute = (0, import_zod_openapi29.createRoute)({
     }
   }
 });
-var getUserPagesRoute = (0, import_zod_openapi29.createRoute)({
+var getUserPagesRoute = (0, import_zod_openapi30.createRoute)({
   method: "get",
   path: "/user/{username}/pages",
   tags: ["user"],
@@ -2753,7 +2782,7 @@ var getUserPagesRoute = (0, import_zod_openapi29.createRoute)({
     }
   }
 });
-var listMembersRoute = (0, import_zod_openapi29.createRoute)({
+var listMembersRoute = (0, import_zod_openapi30.createRoute)({
   method: "get",
   path: "/users",
   tags: ["user"],
@@ -2785,8 +2814,8 @@ var userRoutes = {
 };
 
 // src/contracts/bookmark.ts
-var import_zod_openapi30 = require("@hono/zod-openapi");
-var getBookmarkRoute = (0, import_zod_openapi30.createRoute)({
+var import_zod_openapi31 = require("@hono/zod-openapi");
+var getBookmarkRoute = (0, import_zod_openapi31.createRoute)({
   method: "get",
   path: "/bookmarks",
   tags: ["bookmark"],
@@ -2814,7 +2843,7 @@ var getBookmarkRoute = (0, import_zod_openapi30.createRoute)({
     }
   }
 });
-var listMyBookmarksRoute = (0, import_zod_openapi30.createRoute)({
+var listMyBookmarksRoute = (0, import_zod_openapi31.createRoute)({
   method: "get",
   path: "/bookmarks/me",
   tags: ["bookmark"],
@@ -2838,7 +2867,7 @@ var listMyBookmarksRoute = (0, import_zod_openapi30.createRoute)({
     }
   }
 });
-var addBookmarkRoute = (0, import_zod_openapi30.createRoute)({
+var addBookmarkRoute = (0, import_zod_openapi31.createRoute)({
   method: "post",
   path: "/bookmarks",
   tags: ["bookmark"],
@@ -2868,7 +2897,7 @@ var addBookmarkRoute = (0, import_zod_openapi30.createRoute)({
     }
   }
 });
-var removeBookmarkRoute = (0, import_zod_openapi30.createRoute)({
+var removeBookmarkRoute = (0, import_zod_openapi31.createRoute)({
   method: "delete",
   path: "/bookmarks",
   tags: ["bookmark"],
@@ -2906,41 +2935,41 @@ var bookmarkRoutes = {
 };
 
 // src/contracts/backlink.ts
-var import_zod_openapi32 = require("@hono/zod-openapi");
+var import_zod_openapi33 = require("@hono/zod-openapi");
 
 // src/schemas/backlink.ts
-var import_zod_openapi31 = require("@hono/zod-openapi");
-var ObjectIdString = import_zod_openapi31.z.string().regex(/^[0-9a-f]{24}$/, "Invalid ObjectId");
-var BacklinkFromPageSchema = import_zod_openapi31.z.object({
-  _id: import_zod_openapi31.z.string(),
-  path: import_zod_openapi31.z.string()
+var import_zod_openapi32 = require("@hono/zod-openapi");
+var ObjectIdString = import_zod_openapi32.z.string().regex(/^[0-9a-f]{24}$/, "Invalid ObjectId");
+var BacklinkFromPageSchema = import_zod_openapi32.z.object({
+  _id: import_zod_openapi32.z.string(),
+  path: import_zod_openapi32.z.string()
 });
-var BacklinkFromRevisionSchema = import_zod_openapi31.z.object({
-  _id: import_zod_openapi31.z.string(),
+var BacklinkFromRevisionSchema = import_zod_openapi32.z.object({
+  _id: import_zod_openapi32.z.string(),
   author: UserPublicSchema.nullable().optional()
 });
-var BacklinkSchema = import_zod_openapi31.z.object({
-  _id: import_zod_openapi31.z.string(),
+var BacklinkSchema = import_zod_openapi32.z.object({
+  _id: import_zod_openapi32.z.string(),
   // The destination page's id (the page being linked TO). Always the
   // page passed in the request, but echoed for cache-key parity with the
   // legacy response.
-  page: import_zod_openapi31.z.string(),
+  page: import_zod_openapi32.z.string(),
   fromPage: BacklinkFromPageSchema,
   fromRevision: BacklinkFromRevisionSchema,
-  updatedAt: import_zod_openapi31.z.string()
+  updatedAt: import_zod_openapi32.z.string()
 });
-var GetBacklinksRequestSchema = import_zod_openapi31.z.object({
+var GetBacklinksRequestSchema = import_zod_openapi32.z.object({
   page_id: ObjectIdString,
-  limit: import_zod_openapi31.z.coerce.number().int().min(1).max(100).optional().default(20),
-  offset: import_zod_openapi31.z.coerce.number().int().min(0).optional().default(0)
+  limit: import_zod_openapi32.z.coerce.number().int().min(1).max(100).optional().default(20),
+  offset: import_zod_openapi32.z.coerce.number().int().min(0).optional().default(0)
 });
-var GetBacklinksResponseSchema = import_zod_openapi31.z.object({
-  backlinks: import_zod_openapi31.z.array(BacklinkSchema),
-  hasNext: import_zod_openapi31.z.boolean()
+var GetBacklinksResponseSchema = import_zod_openapi32.z.object({
+  backlinks: import_zod_openapi32.z.array(BacklinkSchema),
+  hasNext: import_zod_openapi32.z.boolean()
 });
 
 // src/contracts/backlink.ts
-var getBacklinksRoute = (0, import_zod_openapi32.createRoute)({
+var getBacklinksRoute = (0, import_zod_openapi33.createRoute)({
   method: "get",
   path: "/backlinks",
   tags: ["backlink"],
@@ -2961,6 +2990,10 @@ var getBacklinksRoute = (0, import_zod_openapi32.createRoute)({
     401: {
       description: "Authentication required",
       content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    404: {
+      description: "Page not found or not granted",
+      content: { "application/json": { schema: PageNotFoundErrorSchema } }
     }
   }
 });
@@ -2969,59 +3002,59 @@ var backlinkRoutes = {
 };
 
 // src/contracts/comment.ts
-var import_zod_openapi34 = require("@hono/zod-openapi");
+var import_zod_openapi35 = require("@hono/zod-openapi");
 
 // src/schemas/comment.ts
-var import_zod_openapi33 = require("@hono/zod-openapi");
-var CommentSchema = import_zod_openapi33.z.object({
-  _id: import_zod_openapi33.z.string(),
-  page: import_zod_openapi33.z.string(),
+var import_zod_openapi34 = require("@hono/zod-openapi");
+var CommentSchema = import_zod_openapi34.z.object({
+  _id: import_zod_openapi34.z.string(),
+  page: import_zod_openapi34.z.string(),
   // creator is populated to a user object on the API side; allow string fallback for safety
-  creator: import_zod_openapi33.z.union([import_zod_openapi33.z.string(), PageUserSchema]).nullable(),
-  revision: import_zod_openapi33.z.string(),
-  comment: import_zod_openapi33.z.string(),
-  commentPosition: import_zod_openapi33.z.number().default(-1),
-  createdAt: import_zod_openapi33.z.string()
-});
-var ListCommentsRequestSchema = import_zod_openapi33.z.object({
-  page_id: import_zod_openapi33.z.string().optional(),
-  revision_id: import_zod_openapi33.z.string().optional()
-});
-var ListCommentsResponseSchema = import_zod_openapi33.z.object({
-  comments: import_zod_openapi33.z.array(CommentSchema)
-});
-var AddCommentRequestSchema = import_zod_openapi33.z.object({
-  page_id: import_zod_openapi33.z.string().min(1, "page_id is required"),
-  revision_id: import_zod_openapi33.z.string().min(1, "revision_id is required"),
-  comment: import_zod_openapi33.z.string().min(1, "comment is required"),
-  comment_position: import_zod_openapi33.z.number().int().optional()
-});
-var AddCommentResponseSchema = import_zod_openapi33.z.object({
+  creator: import_zod_openapi34.z.union([import_zod_openapi34.z.string(), PageUserSchema]).nullable(),
+  revision: import_zod_openapi34.z.string(),
+  comment: import_zod_openapi34.z.string(),
+  commentPosition: import_zod_openapi34.z.number().default(-1),
+  createdAt: import_zod_openapi34.z.string()
+});
+var ListCommentsRequestSchema = import_zod_openapi34.z.object({
+  page_id: import_zod_openapi34.z.string().optional(),
+  revision_id: import_zod_openapi34.z.string().optional()
+});
+var ListCommentsResponseSchema = import_zod_openapi34.z.object({
+  comments: import_zod_openapi34.z.array(CommentSchema)
+});
+var AddCommentRequestSchema = import_zod_openapi34.z.object({
+  page_id: import_zod_openapi34.z.string().min(1, "page_id is required"),
+  revision_id: import_zod_openapi34.z.string().min(1, "revision_id is required"),
+  comment: import_zod_openapi34.z.string().min(1, "comment is required"),
+  comment_position: import_zod_openapi34.z.number().int().optional()
+});
+var AddCommentResponseSchema = import_zod_openapi34.z.object({
   comment: CommentSchema,
-  newlyWatching: import_zod_openapi33.z.boolean()
+  newlyWatching: import_zod_openapi34.z.boolean()
 });
-var DeleteCommentRequestSchema = import_zod_openapi33.z.object({
-  comment_id: import_zod_openapi33.z.string().min(1, "comment_id is required"),
-  page_id: import_zod_openapi33.z.string().min(1, "page_id is required")
+var DeleteCommentRequestSchema = import_zod_openapi34.z.object({
+  comment_id: import_zod_openapi34.z.string().min(1, "comment_id is required"),
+  page_id: import_zod_openapi34.z.string().min(1, "page_id is required")
 });
-var DeleteCommentResponseSchema = import_zod_openapi33.z.object({
-  ok: import_zod_openapi33.z.literal(true)
+var DeleteCommentResponseSchema = import_zod_openapi34.z.object({
+  ok: import_zod_openapi34.z.literal(true)
 });
-var CommentNotFoundErrorSchema = import_zod_openapi33.z.object({
-  error: import_zod_openapi33.z.object({
-    code: import_zod_openapi33.z.literal("COMMENT_NOT_FOUND"),
-    message: import_zod_openapi33.z.literal("Comment not found")
+var CommentNotFoundErrorSchema = import_zod_openapi34.z.object({
+  error: import_zod_openapi34.z.object({
+    code: import_zod_openapi34.z.literal("COMMENT_NOT_FOUND"),
+    message: import_zod_openapi34.z.literal("Comment not found")
   })
 });
-var CommentInvalidRequestErrorSchema = import_zod_openapi33.z.object({
-  error: import_zod_openapi33.z.object({
-    code: import_zod_openapi33.z.literal("INVALID_REQUEST"),
-    message: import_zod_openapi33.z.string()
+var CommentInvalidRequestErrorSchema = import_zod_openapi34.z.object({
+  error: import_zod_openapi34.z.object({
+    code: import_zod_openapi34.z.literal("INVALID_REQUEST"),
+    message: import_zod_openapi34.z.string()
   })
 });
 
 // src/contracts/comment.ts
-var listCommentsRoute = (0, import_zod_openapi34.createRoute)({
+var listCommentsRoute = (0, import_zod_openapi35.createRoute)({
   method: "get",
   path: "/comments",
   tags: ["comment"],
@@ -3049,7 +3082,7 @@ var listCommentsRoute = (0, import_zod_openapi34.createRoute)({
     }
   }
 });
-var addCommentRoute = (0, import_zod_openapi34.createRoute)({
+var addCommentRoute = (0, import_zod_openapi35.createRoute)({
   method: "post",
   path: "/comments",
   tags: ["comment"],
@@ -3079,7 +3112,7 @@ var addCommentRoute = (0, import_zod_openapi34.createRoute)({
     }
   }
 });
-var deleteCommentRoute = (0, import_zod_openapi34.createRoute)({
+var deleteCommentRoute = (0, import_zod_openapi35.createRoute)({
   method: "delete",
   path: "/comments",
   tags: ["comment"],
@@ -3120,50 +3153,50 @@ var commentRoutes = {
 };
 
 // src/contracts/revision.ts
-var import_zod_openapi36 = require("@hono/zod-openapi");
+var import_zod_openapi37 = require("@hono/zod-openapi");
 
 // src/schemas/revision.ts
-var import_zod_openapi35 = require("@hono/zod-openapi");
-var RevisionMetaSchema = import_zod_openapi35.z.object({
-  _id: import_zod_openapi35.z.string(),
-  path: import_zod_openapi35.z.string(),
+var import_zod_openapi36 = require("@hono/zod-openapi");
+var RevisionMetaSchema = import_zod_openapi36.z.object({
+  _id: import_zod_openapi36.z.string(),
+  path: import_zod_openapi36.z.string(),
   author: PageUserSchema.nullable().optional(),
   savedBy: PageUserSchema.nullable().optional(),
-  contributors: import_zod_openapi35.z.array(PageUserSchema).optional(),
+  contributors: import_zod_openapi36.z.array(PageUserSchema).optional(),
   // RFC-0010 — edit channel. `web` (browser / collab editor) vs the API
   // token paths (`oauth` / `pat`). Absent on pre-RFC-0010 revisions. The
   // history UI shows an "app" chip for the token paths.
-  editVia: import_zod_openapi35.z.enum(["web", "oauth", "pat"]).optional(),
-  createdAt: import_zod_openapi35.z.string()
+  editVia: import_zod_openapi36.z.enum(["web", "oauth", "pat"]).optional(),
+  createdAt: import_zod_openapi36.z.string()
 });
-var ListRevisionsRequestSchema = import_zod_openapi35.z.object({
-  limit: import_zod_openapi35.z.coerce.number().int().positive().max(200).optional().default(50),
-  offset: import_zod_openapi35.z.coerce.number().int().min(0).optional().default(0)
+var ListRevisionsRequestSchema = import_zod_openapi36.z.object({
+  limit: import_zod_openapi36.z.coerce.number().int().positive().max(200).optional().default(50),
+  offset: import_zod_openapi36.z.coerce.number().int().min(0).optional().default(0)
 });
-var ListRevisionsResponseSchema = import_zod_openapi35.z.object({
-  revisions: import_zod_openapi35.z.array(RevisionMetaSchema),
+var ListRevisionsResponseSchema = import_zod_openapi36.z.object({
+  revisions: import_zod_openapi36.z.array(RevisionMetaSchema),
   pager: PagerSchema
 });
-var GetRevisionResponseSchema = import_zod_openapi35.z.object({
+var GetRevisionResponseSchema = import_zod_openapi36.z.object({
   revision: RevisionSchema
 });
-var GetRevisionsRequestSchema = import_zod_openapi35.z.object({
-  ids: import_zod_openapi35.z.string().min(1, "ids is required")
+var GetRevisionsRequestSchema = import_zod_openapi36.z.object({
+  ids: import_zod_openapi36.z.string().min(1, "ids is required")
 });
-var GetRevisionsResponseSchema = import_zod_openapi35.z.object({
-  revisions: import_zod_openapi35.z.array(RevisionSchema)
+var GetRevisionsResponseSchema = import_zod_openapi36.z.object({
+  revisions: import_zod_openapi36.z.array(RevisionSchema)
 });
-var RevisionInvalidRequestErrorSchema = import_zod_openapi35.z.object({
-  error: import_zod_openapi35.z.object({
-    code: import_zod_openapi35.z.literal("INVALID_REQUEST"),
-    message: import_zod_openapi35.z.string()
+var RevisionInvalidRequestErrorSchema = import_zod_openapi36.z.object({
+  error: import_zod_openapi36.z.object({
+    code: import_zod_openapi36.z.literal("INVALID_REQUEST"),
+    message: import_zod_openapi36.z.string()
   })
 });
 
 // src/contracts/revision.ts
-var PageIdParamSchema = import_zod_openapi36.z.object({ page_id: import_zod_openapi36.z.string() });
-var RevisionIdParamSchema = import_zod_openapi36.z.object({ id: import_zod_openapi36.z.string() });
-var listRevisionsRoute = (0, import_zod_openapi36.createRoute)({
+var PageIdParamSchema = import_zod_openapi37.z.object({ page_id: import_zod_openapi37.z.string() });
+var RevisionIdParamSchema = import_zod_openapi37.z.object({ id: import_zod_openapi37.z.string() });
+var listRevisionsRoute = (0, import_zod_openapi37.createRoute)({
   method: "get",
   path: "/pages/{page_id}/revisions",
   tags: ["revision"],
@@ -3192,7 +3225,7 @@ var listRevisionsRoute = (0, import_zod_openapi36.createRoute)({
     }
   }
 });
-var getRevisionsRoute = (0, import_zod_openapi36.createRoute)({
+var getRevisionsRoute = (0, import_zod_openapi37.createRoute)({
   method: "get",
   path: "/pages/revisions",
   tags: ["revision"],
@@ -3220,7 +3253,7 @@ var getRevisionsRoute = (0, import_zod_openapi36.createRoute)({
     }
   }
 });
-var getRevisionRoute = (0, import_zod_openapi36.createRoute)({
+var getRevisionRoute = (0, import_zod_openapi37.createRoute)({
   method: "get",
   path: "/pages/revisions/{id}",
   tags: ["revision"],
@@ -3258,24 +3291,24 @@ var revisionRoutes = {
 };
 
 // src/contracts/notification.ts
-var import_zod_openapi38 = require("@hono/zod-openapi");
+var import_zod_openapi39 = require("@hono/zod-openapi");
 
 // src/schemas/notification.ts
-var import_zod_openapi37 = require("@hono/zod-openapi");
-var NotificationStatusSchema = import_zod_openapi37.z.enum(["UNREAD", "UNOPENED", "OPENED"]);
+var import_zod_openapi38 = require("@hono/zod-openapi");
+var NotificationStatusSchema = import_zod_openapi38.z.enum(["UNREAD", "UNOPENED", "OPENED"]);
 var NotificationStatusEnum = {
   UNREAD: "UNREAD",
   UNOPENED: "UNOPENED",
   OPENED: "OPENED"
 };
-var NotificationActionSchema = import_zod_openapi37.z.enum(["COMMENT", "LIKE", "MENTION", "UPDATE"]);
+var NotificationActionSchema = import_zod_openapi38.z.enum(["COMMENT", "LIKE", "MENTION", "UPDATE"]);
 var NotificationActionEnum = {
   COMMENT: "COMMENT",
   LIKE: "LIKE",
   MENTION: "MENTION",
   UPDATE: "UPDATE"
 };
-var NotificationTargetModelSchema = import_zod_openapi37.z.enum(["Page"]);
+var NotificationTargetModelSchema = import_zod_openapi38.z.enum(["Page"]);
 var NotificationTargetModelEnum = {
   PAGE: "Page"
 };
@@ -3284,71 +3317,71 @@ var PageRefSchema = PageSchema.pick({
   path: true,
   status: true
 });
-var NotificationSchema = import_zod_openapi37.z.object({
-  _id: import_zod_openapi37.z.string(),
-  user: import_zod_openapi37.z.string(),
+var NotificationSchema = import_zod_openapi38.z.object({
+  _id: import_zod_openapi38.z.string(),
+  user: import_zod_openapi38.z.string(),
   targetModel: NotificationTargetModelSchema,
   target: PageRefSchema,
   action: NotificationActionSchema,
   status: NotificationStatusSchema,
-  actionUsers: import_zod_openapi37.z.array(UserPublicSchema),
-  createdAt: import_zod_openapi37.z.string()
+  actionUsers: import_zod_openapi38.z.array(UserPublicSchema),
+  createdAt: import_zod_openapi38.z.string()
 });
-var ListNotificationsRequestSchema = import_zod_openapi37.z.object({
-  limit: import_zod_openapi37.z.coerce.number().optional().default(10),
-  offset: import_zod_openapi37.z.coerce.number().optional().default(0)
+var ListNotificationsRequestSchema = import_zod_openapi38.z.object({
+  limit: import_zod_openapi38.z.coerce.number().optional().default(10),
+  offset: import_zod_openapi38.z.coerce.number().optional().default(0)
 });
-var ListNotificationsResponseSchema = import_zod_openapi37.z.object({
-  notifications: import_zod_openapi37.z.array(NotificationSchema),
+var ListNotificationsResponseSchema = import_zod_openapi38.z.object({
+  notifications: import_zod_openapi38.z.array(NotificationSchema),
   pager: PagerSchema
 });
-var MarkAllAsReadResponseSchema = import_zod_openapi37.z.object({
-  ok: import_zod_openapi37.z.literal(true)
+var MarkAllAsReadResponseSchema = import_zod_openapi38.z.object({
+  ok: import_zod_openapi38.z.literal(true)
 });
-var OpenNotificationParamSchema = import_zod_openapi37.z.object({
-  id: import_zod_openapi37.z.string()
+var OpenNotificationParamSchema = import_zod_openapi38.z.object({
+  id: import_zod_openapi38.z.string()
 });
-var OpenNotificationResponseSchema = import_zod_openapi37.z.object({
+var OpenNotificationResponseSchema = import_zod_openapi38.z.object({
   notification: NotificationSchema
 });
-var NotificationStatusResponseSchema = import_zod_openapi37.z.object({
-  count: import_zod_openapi37.z.number()
+var NotificationStatusResponseSchema = import_zod_openapi38.z.object({
+  count: import_zod_openapi38.z.number()
 });
-var NotificationNotFoundErrorSchema = import_zod_openapi37.z.object({
-  error: import_zod_openapi37.z.object({
-    code: import_zod_openapi37.z.literal("NOTIFICATION_NOT_FOUND"),
-    message: import_zod_openapi37.z.literal("Notification not found")
+var NotificationNotFoundErrorSchema = import_zod_openapi38.z.object({
+  error: import_zod_openapi38.z.object({
+    code: import_zod_openapi38.z.literal("NOTIFICATION_NOT_FOUND"),
+    message: import_zod_openapi38.z.literal("Notification not found")
   })
 });
-var NotificationsTokenResponseSchema = import_zod_openapi37.z.object({
-  token: import_zod_openapi37.z.string(),
-  selfUserId: import_zod_openapi37.z.string(),
-  expiresAt: import_zod_openapi37.z.string()
+var NotificationsTokenResponseSchema = import_zod_openapi38.z.object({
+  token: import_zod_openapi38.z.string(),
+  selfUserId: import_zod_openapi38.z.string(),
+  expiresAt: import_zod_openapi38.z.string()
 });
-var NotificationsTokenPayloadSchema = import_zod_openapi37.z.object({
-  selfUserId: import_zod_openapi37.z.string(),
+var NotificationsTokenPayloadSchema = import_zod_openapi38.z.object({
+  selfUserId: import_zod_openapi38.z.string(),
   // Random UUID mixed into every signed token so two tokens minted
   // within the same second still produce byte-different JWT strings.
   // The browser uses the token as a React effect dependency to drive
   // the WebSocket reconnect — without `jti`, the iat/exp pair is
   // identical at second granularity and the dep stays stable.
-  jti: import_zod_openapi37.z.string().uuid(),
-  iat: import_zod_openapi37.z.number().int(),
-  exp: import_zod_openapi37.z.number().int()
+  jti: import_zod_openapi38.z.string().uuid(),
+  iat: import_zod_openapi38.z.number().int(),
+  exp: import_zod_openapi38.z.number().int()
 });
-var NotificationsChangedMessageSchema = import_zod_openapi37.z.object({
-  type: import_zod_openapi37.z.literal("changed")
+var NotificationsChangedMessageSchema = import_zod_openapi38.z.object({
+  type: import_zod_openapi38.z.literal("changed")
 });
 var NotificationsServerMessageSchema = NotificationsChangedMessageSchema;
 
 // src/contracts/notification.ts
-var NotificationInvalidRequestErrorSchema = import_zod_openapi38.z.object({
-  error: import_zod_openapi38.z.object({
-    code: import_zod_openapi38.z.literal("INVALID_REQUEST"),
-    message: import_zod_openapi38.z.string()
+var NotificationInvalidRequestErrorSchema = import_zod_openapi39.z.object({
+  error: import_zod_openapi39.z.object({
+    code: import_zod_openapi39.z.literal("INVALID_REQUEST"),
+    message: import_zod_openapi39.z.string()
   })
 });
-var listNotificationsRoute = (0, import_zod_openapi38.createRoute)({
+var listNotificationsRoute = (0, import_zod_openapi39.createRoute)({
   method: "get",
   path: "/notifications",
   tags: ["notification"],
@@ -3372,7 +3405,7 @@ var listNotificationsRoute = (0, import_zod_openapi38.createRoute)({
     }
   }
 });
-var markAllAsReadRoute = (0, import_zod_openapi38.createRoute)({
+var markAllAsReadRoute = (0, import_zod_openapi39.createRoute)({
   method: "post",
   path: "/notifications/read",
   tags: ["notification"],
@@ -3393,7 +3426,7 @@ var markAllAsReadRoute = (0, import_zod_openapi38.createRoute)({
     }
   }
 });
-var getUnreadCountRoute = (0, import_zod_openapi38.createRoute)({
+var getUnreadCountRoute = (0, import_zod_openapi39.createRoute)({
   method: "get",
   path: "/notifications/status",
   tags: ["notification"],
@@ -3414,7 +3447,7 @@ var getUnreadCountRoute = (0, import_zod_openapi38.createRoute)({
     }
   }
 });
-var openNotificationRoute = (0, import_zod_openapi38.createRoute)({
+var openNotificationRoute = (0, import_zod_openapi39.createRoute)({
   method: "post",
   path: "/notifications/{id}/open",
   tags: ["notification"],
@@ -3446,7 +3479,7 @@ var openNotificationRoute = (0, import_zod_openapi38.createRoute)({
     }
   }
 });
-var getNotificationsTokenRoute = (0, import_zod_openapi38.createRoute)({
+var getNotificationsTokenRoute = (0, import_zod_openapi39.createRoute)({
   method: "get",
   path: "/notifications/token",
   tags: ["notification"],
@@ -3481,26 +3514,60 @@ var notificationRoutes = {
 };
 
 // src/contracts/page.ts
-var import_zod_openapi39 = require("@hono/zod-openapi");
-var PageBadRequestErrorSchema = import_zod_openapi39.z.object({
-  error: import_zod_openapi39.z.object({
-    code: import_zod_openapi39.z.string(),
-    message: import_zod_openapi39.z.string()
+var import_zod_openapi41 = require("@hono/zod-openapi");
+
+// src/schemas/autocomplete.ts
+var import_zod_openapi40 = require("@hono/zod-openapi");
+var AutocompleteRequestSchema = import_zod_openapi40.z.object({
+  q: import_zod_openapi40.z.string().min(1).max(128),
+  limit: import_zod_openapi40.z.coerce.number().int().min(1).max(25).optional().default(10),
+  /**
+   * How `q` is matched against the candidate text. `'substring'` (the
+   * default, used by the editor's `@mention` / `[[wikilink]]` pickers)
+   * keeps the historical anywhere-in-string match. `'prefix'` anchors
+   * the match at the start — used by the "create page" modal, where the
+   * user is building a `/`-rooted path and only true prefixes are valid
+   * completions of what they have typed so far.
+   */
+  anchor: import_zod_openapi40.z.enum(["substring", "prefix"]).optional().default("substring")
+});
+var AutocompleteResultSchema = import_zod_openapi40.z.object({
+  id: import_zod_openapi40.z.string(),
+  label: import_zod_openapi40.z.string(),
+  display: import_zod_openapi40.z.string(),
+  avatar: import_zod_openapi40.z.string().nullable().optional(),
+  modifiedAt: import_zod_openapi40.z.string().nullable().optional(),
+  score: import_zod_openapi40.z.number()
+});
+var AutocompleteResponseSchema = import_zod_openapi40.z.object({
+  results: import_zod_openapi40.z.array(AutocompleteResultSchema)
+});
+var AutocompleteRateLimitErrorSchema = import_zod_openapi40.z.object({
+  error: import_zod_openapi40.z.literal("rate_limited"),
+  message: import_zod_openapi40.z.string(),
+  retryAfterSeconds: import_zod_openapi40.z.number()
+});
+
+// src/contracts/page.ts
+var PageBadRequestErrorSchema = import_zod_openapi41.z.object({
+  error: import_zod_openapi41.z.object({
+    code: import_zod_openapi41.z.string(),
+    message: import_zod_openapi41.z.string()
   })
 });
-var DeletePageRequestSchema = import_zod_openapi39.z.object({
-  page_id: import_zod_openapi39.z.string(),
-  revision_id: import_zod_openapi39.z.string().optional(),
-  completely: import_zod_openapi39.z.boolean().optional()
+var DeletePageRequestSchema = import_zod_openapi41.z.object({
+  page_id: import_zod_openapi41.z.string(),
+  revision_id: import_zod_openapi41.z.string().optional(),
+  completely: import_zod_openapi41.z.boolean().optional()
 });
-var RevertDeletedPageRequestSchema = import_zod_openapi39.z.object({
-  page_id: import_zod_openapi39.z.string()
+var RevertDeletedPageRequestSchema = import_zod_openapi41.z.object({
+  page_id: import_zod_openapi41.z.string()
 });
-var PageIdBodySchema = import_zod_openapi39.z.object({
-  page_id: import_zod_openapi39.z.string()
+var PageIdBodySchema = import_zod_openapi41.z.object({
+  page_id: import_zod_openapi41.z.string()
 });
-var PageResponseSchema = import_zod_openapi39.z.object({ page: PageSchema });
-var getPageRoute = (0, import_zod_openapi39.createRoute)({
+var PageResponseSchema = import_zod_openapi41.z.object({ page: PageSchema });
+var getPageRoute = (0, import_zod_openapi41.createRoute)({
   method: "get",
   path: "/pages",
   tags: ["page"],
@@ -3525,10 +3592,19 @@ var getPageRoute = (0, import_zod_openapi39.createRoute)({
     404: {
       description: "Page not found",
       content: { "application/json": { schema: PageNotFoundErrorSchema } }
+    },
+    // feature-live-page-sync-reconcile — separates a genuine unknown-error
+    // 500 (e.g. a transient render-artifact / renderer failure) from the
+    // not-found/not-granted 404/403 branches above, so a reconcile head-GET
+    // can tell "page is really gone/forbidden" from "read failed, try
+    // again later" (see `packages/api/src/hono/handlers/page.ts`'s split catch).
+    500: {
+      description: "Internal server error",
+      content: { "application/json": { schema: InternalServerErrorSchema } }
     }
   }
 });
-var listPagesRoute = (0, import_zod_openapi39.createRoute)({
+var listPagesRoute = (0, import_zod_openapi41.createRoute)({
   method: "get",
   path: "/pages/list",
   tags: ["page"],
@@ -3548,7 +3624,7 @@ var listPagesRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var listPageChildrenRoute = (0, import_zod_openapi39.createRoute)({
+var listPageChildrenRoute = (0, import_zod_openapi41.createRoute)({
   method: "get",
   path: "/pages/children",
   tags: ["page"],
@@ -3568,7 +3644,7 @@ var listPageChildrenRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var createPageRoute = (0, import_zod_openapi39.createRoute)({
+var createPageRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages",
   tags: ["page"],
@@ -3594,7 +3670,7 @@ var createPageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var updatePageRoute = (0, import_zod_openapi39.createRoute)({
+var updatePageRoute = (0, import_zod_openapi41.createRoute)({
   method: "put",
   path: "/pages",
   tags: ["page"],
@@ -3628,7 +3704,7 @@ var updatePageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var setPageGrantRoute = (0, import_zod_openapi39.createRoute)({
+var setPageGrantRoute = (0, import_zod_openapi41.createRoute)({
   method: "put",
   path: "/pages/grant",
   tags: ["page"],
@@ -3658,7 +3734,7 @@ var setPageGrantRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var seenPageRoute = (0, import_zod_openapi39.createRoute)({
+var seenPageRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages/seen",
   tags: ["page"],
@@ -3688,7 +3764,7 @@ var seenPageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var getSeenUsersRoute = (0, import_zod_openapi39.createRoute)({
+var getSeenUsersRoute = (0, import_zod_openapi41.createRoute)({
   method: "get",
   path: "/pages/seen-users",
   tags: ["page"],
@@ -3716,7 +3792,7 @@ var getSeenUsersRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var likePageRoute = (0, import_zod_openapi39.createRoute)({
+var likePageRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages/like",
   tags: ["page"],
@@ -3746,7 +3822,7 @@ var likePageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var unlikePageRoute = (0, import_zod_openapi39.createRoute)({
+var unlikePageRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages/unlike",
   tags: ["page"],
@@ -3776,7 +3852,53 @@ var unlikePageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var getWatchStatusRoute = (0, import_zod_openapi39.createRoute)({
+var claimPageLinkAccessRoute = (0, import_zod_openapi41.createRoute)({
+  method: "post",
+  path: "/pages/link-access",
+  tags: ["page"],
+  security: [{ bearerAuth: [] }],
+  summary: "Resolve a page by id, granting first-time link-share access to GRANT_RESTRICTED pages",
+  request: {
+    body: {
+      content: { "application/json": { schema: PageIdBodySchema } }
+    }
+  },
+  responses: {
+    200: {
+      description: "The resolved page, with `granted` telling whether this call just added the caller to grantedUsers",
+      content: { "application/json": { schema: ClaimPageLinkAccessResponseSchema } }
+    },
+    400: {
+      description: "Invalid page_id",
+      content: { "application/json": { schema: InvalidPageIdErrorSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    403: {
+      description: "The caller has no access to the page (isGrantedFor is false) or lacks scope / is a non-web session \u2014 403 is about the caller lacking access, never about the page grant type per se",
+      content: {
+        "application/json": {
+          schema: import_zod_openapi41.z.union([PageNotGrantedErrorSchema, InsufficientScopeErrorSchema])
+        }
+      }
+    },
+    404: {
+      description: "Page not found",
+      content: { "application/json": { schema: PageNotFoundErrorSchema } }
+    },
+    // Per-user rate limit (30 req/min) — same wire shape as autocomplete's
+    // 429 (`{ error: 'rate_limited', message, retryAfterSeconds }`), reused
+    // rather than duplicated (see the `AutocompleteRateLimitErrorSchema`
+    // import above).
+    429: {
+      description: "Rate limit exceeded for POST /pages/link-access (per-user). Same wire shape as autocomplete rate limiting.",
+      content: { "application/json": { schema: AutocompleteRateLimitErrorSchema } }
+    }
+  }
+});
+var getWatchStatusRoute = (0, import_zod_openapi41.createRoute)({
   method: "get",
   path: "/pages/watch",
   tags: ["page"],
@@ -3804,7 +3926,7 @@ var getWatchStatusRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var setWatchStatusRoute = (0, import_zod_openapi39.createRoute)({
+var setWatchStatusRoute = (0, import_zod_openapi41.createRoute)({
   method: "put",
   path: "/pages/watch",
   tags: ["page"],
@@ -3834,7 +3956,7 @@ var setWatchStatusRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var deletePageRoute = (0, import_zod_openapi39.createRoute)({
+var deletePageRoute = (0, import_zod_openapi41.createRoute)({
   method: "delete",
   path: "/pages",
   tags: ["page"],
@@ -3868,7 +3990,7 @@ var deletePageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var revertDeletedPageRoute = (0, import_zod_openapi39.createRoute)({
+var revertDeletedPageRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages/revert",
   tags: ["page"],
@@ -3898,7 +4020,7 @@ var revertDeletedPageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var revertToRevisionRoute = (0, import_zod_openapi39.createRoute)({
+var revertToRevisionRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages/revert-to-revision",
   tags: ["page"],
@@ -3928,7 +4050,7 @@ var revertToRevisionRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var renamePageRoute = (0, import_zod_openapi39.createRoute)({
+var renamePageRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages/rename",
   tags: ["page"],
@@ -3948,7 +4070,7 @@ var renamePageRoute = (0, import_zod_openapi39.createRoute)({
       description: "PAGE_INVALID_NAME / PAGE_EXISTS / PAGE_RENAME_FAILED / PAGE_RENAME_TREE_FAILED",
       content: {
         "application/json": {
-          schema: import_zod_openapi39.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
+          schema: import_zod_openapi41.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
         }
       }
     },
@@ -3966,7 +4088,7 @@ var renamePageRoute = (0, import_zod_openapi39.createRoute)({
     }
   }
 });
-var renameSubtreeRoute = (0, import_zod_openapi39.createRoute)({
+var renameSubtreeRoute = (0, import_zod_openapi41.createRoute)({
   method: "post",
   path: "/pages/rename-subtree",
   tags: ["page"],
@@ -3986,7 +4108,7 @@ var renameSubtreeRoute = (0, import_zod_openapi39.createRoute)({
       description: "PAGE_INVALID_NAME / PAGE_RENAME_TREE_FAILED (collisions, nothing to move, or partial failure)",
       content: {
         "application/json": {
-          schema: import_zod_openapi39.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
+          schema: import_zod_openapi41.z.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
         }
       }
     },
@@ -4017,6 +4139,8 @@ var pageRoutes = {
   likePageRoute,
   // POST /pages/unlike — unlikePage
   unlikePageRoute,
+  // POST /pages/link-access — claimPageLinkAccess (grant-on-first-access)
+  claimPageLinkAccessRoute,
   // GET /pages/watch — getWatchStatus
   getWatchStatusRoute,
   // PUT /pages/watch — setWatchStatus
@@ -4034,19 +4158,19 @@ var pageRoutes = {
 };
 
 // src/contracts/page-preview.ts
-var import_zod_openapi41 = require("@hono/zod-openapi");
+var import_zod_openapi43 = require("@hono/zod-openapi");
 
 // src/schemas/page-preview.ts
-var import_zod_openapi40 = require("@hono/zod-openapi");
-var PreviewPageRequestSchema = import_zod_openapi40.z.object({
-  body: import_zod_openapi40.z.string()
+var import_zod_openapi42 = require("@hono/zod-openapi");
+var PreviewPageRequestSchema = import_zod_openapi42.z.object({
+  body: import_zod_openapi42.z.string()
 });
-var PreviewPageResponseSchema = import_zod_openapi40.z.object({
-  renderedAst: import_zod_openapi40.z.unknown()
+var PreviewPageResponseSchema = import_zod_openapi42.z.object({
+  renderedAst: import_zod_openapi42.z.unknown()
 });
 
 // src/contracts/page-preview.ts
-var previewPageRoute = (0, import_zod_openapi41.createRoute)({
+var previewPageRoute = (0, import_zod_openapi43.createRoute)({
   method: "post",
   path: "/pages/preview",
   tags: ["page-preview"],
@@ -4077,11 +4201,11 @@ var pagePreviewRoutes = {
 };
 
 // src/contracts/page-collab.ts
-var import_zod_openapi42 = require("@hono/zod-openapi");
-var PageIdPathParamsSchema = import_zod_openapi42.z.object({
-  id: import_zod_openapi42.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var import_zod_openapi44 = require("@hono/zod-openapi");
+var PageIdPathParamsSchema = import_zod_openapi44.z.object({
+  id: import_zod_openapi44.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var getYjsTokenRoute = (0, import_zod_openapi42.createRoute)({
+var getYjsTokenRoute = (0, import_zod_openapi44.createRoute)({
   method: "get",
   path: "/pages/{id}/yjs-token",
   tags: ["page-collab"],
@@ -4118,79 +4242,79 @@ var pageCollabRoutes = {
 };
 
 // src/contracts/presence.ts
-var import_zod_openapi44 = require("@hono/zod-openapi");
+var import_zod_openapi46 = require("@hono/zod-openapi");
 
 // src/schemas/presence.ts
-var import_zod_openapi43 = require("@hono/zod-openapi");
-var PresenceTokenResponseSchema = import_zod_openapi43.z.object({
-  token: import_zod_openapi43.z.string(),
-  pageId: import_zod_openapi43.z.string(),
-  selfUserId: import_zod_openapi43.z.string(),
-  expiresAt: import_zod_openapi43.z.string()
-});
-var PresenceTokenPayloadSchema = import_zod_openapi43.z.object({
-  userId: import_zod_openapi43.z.string(),
-  pageId: import_zod_openapi43.z.string(),
-  iat: import_zod_openapi43.z.number().int(),
-  exp: import_zod_openapi43.z.number().int()
-});
-var PresenceViewerSchema = import_zod_openapi43.z.object({
-  userId: import_zod_openapi43.z.string(),
-  username: import_zod_openapi43.z.string(),
-  displayName: import_zod_openapi43.z.string(),
-  avatarUrl: import_zod_openapi43.z.string().nullable(),
-  isEditing: import_zod_openapi43.z.boolean(),
-  joinedAt: import_zod_openapi43.z.number().int()
-});
-var PresenceHeartbeatMessageSchema = import_zod_openapi43.z.object({
-  type: import_zod_openapi43.z.literal("heartbeat")
+var import_zod_openapi45 = require("@hono/zod-openapi");
+var PresenceTokenResponseSchema = import_zod_openapi45.z.object({
+  token: import_zod_openapi45.z.string(),
+  pageId: import_zod_openapi45.z.string(),
+  selfUserId: import_zod_openapi45.z.string(),
+  expiresAt: import_zod_openapi45.z.string()
+});
+var PresenceTokenPayloadSchema = import_zod_openapi45.z.object({
+  userId: import_zod_openapi45.z.string(),
+  pageId: import_zod_openapi45.z.string(),
+  iat: import_zod_openapi45.z.number().int(),
+  exp: import_zod_openapi45.z.number().int()
+});
+var PresenceViewerSchema = import_zod_openapi45.z.object({
+  userId: import_zod_openapi45.z.string(),
+  username: import_zod_openapi45.z.string(),
+  displayName: import_zod_openapi45.z.string(),
+  avatarUrl: import_zod_openapi45.z.string().nullable(),
+  isEditing: import_zod_openapi45.z.boolean(),
+  joinedAt: import_zod_openapi45.z.number().int()
+});
+var PresenceHeartbeatMessageSchema = import_zod_openapi45.z.object({
+  type: import_zod_openapi45.z.literal("heartbeat")
 });
 var PresenceClientMessageSchema = PresenceHeartbeatMessageSchema;
-var PresenceViewersMessageSchema = import_zod_openapi43.z.object({
-  type: import_zod_openapi43.z.literal("viewers"),
-  viewers: import_zod_openapi43.z.array(PresenceViewerSchema)
-});
-var PresencePageUpdatedMessageSchema = import_zod_openapi43.z.object({
-  type: import_zod_openapi43.z.literal("page-updated"),
-  pageId: import_zod_openapi43.z.string(),
-  revisionId: import_zod_openapi43.z.string(),
-  editorUserId: import_zod_openapi43.z.string(),
-  editorDisplayName: import_zod_openapi43.z.string()
-});
-var PresenceCommentChangedMessageSchema = import_zod_openapi43.z.object({
-  type: import_zod_openapi43.z.literal("comment-changed"),
-  pageId: import_zod_openapi43.z.string(),
-  changeType: import_zod_openapi43.z.enum(["added", "removed"]),
-  commentId: import_zod_openapi43.z.string(),
-  actorUserId: import_zod_openapi43.z.string().optional()
-});
-var PresenceServerMessageSchema = import_zod_openapi43.z.discriminatedUnion("type", [
+var PresenceViewersMessageSchema = import_zod_openapi45.z.object({
+  type: import_zod_openapi45.z.literal("viewers"),
+  viewers: import_zod_openapi45.z.array(PresenceViewerSchema)
+});
+var PresencePageUpdatedMessageSchema = import_zod_openapi45.z.object({
+  type: import_zod_openapi45.z.literal("page-updated"),
+  pageId: import_zod_openapi45.z.string(),
+  revisionId: import_zod_openapi45.z.string(),
+  editorUserId: import_zod_openapi45.z.string(),
+  editorDisplayName: import_zod_openapi45.z.string()
+});
+var PresenceCommentChangedMessageSchema = import_zod_openapi45.z.object({
+  type: import_zod_openapi45.z.literal("comment-changed"),
+  pageId: import_zod_openapi45.z.string(),
+  changeType: import_zod_openapi45.z.enum(["added", "removed"]),
+  commentId: import_zod_openapi45.z.string(),
+  actorUserId: import_zod_openapi45.z.string().optional()
+});
+var PresenceServerMessageSchema = import_zod_openapi45.z.discriminatedUnion("type", [
   PresenceViewersMessageSchema,
   PresencePageUpdatedMessageSchema,
   PresenceCommentChangedMessageSchema
 ]);
-var LikerSchema = import_zod_openapi43.z.object({
-  id: import_zod_openapi43.z.string(),
-  username: import_zod_openapi43.z.string(),
-  displayName: import_zod_openapi43.z.string(),
-  avatarUrl: import_zod_openapi43.z.string().nullable(),
-  likedAt: import_zod_openapi43.z.string().nullable()
-});
-var LikersResponseSchema = import_zod_openapi43.z.object({
-  users: import_zod_openapi43.z.array(LikerSchema),
-  totalCount: import_zod_openapi43.z.number().int().nonnegative()
-});
-var GetLikersRequestSchema = import_zod_openapi43.z.object({
+var LikerSchema = import_zod_openapi45.z.object({
+  id: import_zod_openapi45.z.string(),
+  username: import_zod_openapi45.z.string(),
+  displayName: import_zod_openapi45.z.string(),
+  avatarUrl: import_zod_openapi45.z.string().nullable(),
+  likedAt: import_zod_openapi45.z.string().nullable()
+});
+var LikersResponseSchema = import_zod_openapi45.z.object({
+  users: import_zod_openapi45.z.array(LikerSchema),
+  totalCount: import_zod_openapi45.z.number().int().nonnegative()
+});
+var GetLikersRequestSchema = import_zod_openapi45.z.object({
   // Optional cap on returned `users`. `totalCount` always reflects the
   // full count regardless of `limit`. Omit for the full list.
-  limit: import_zod_openapi43.z.coerce.number().int().positive().optional()
+  limit: import_zod_openapi45.z.coerce.number().int().positive().optional()
 });
 
 // src/contracts/presence.ts
-var PageIdPathParamsSchema2 = import_zod_openapi44.z.object({
-  id: import_zod_openapi44.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var PageIdPathParamsSchema2 = import_zod_openapi46.z.object({
+  id: import_zod_openapi46.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var getPresenceTokenRoute = (0, import_zod_openapi44.createRoute)({
+var getPresenceTokenRoute = (0, import_zod_openapi46.createRoute)({
   method: "get",
   path: "/pages/{id}/presence-token",
   tags: ["presence"],
@@ -4222,7 +4346,7 @@ var getPresenceTokenRoute = (0, import_zod_openapi44.createRoute)({
     }
   }
 });
-var getLikersRoute = (0, import_zod_openapi44.createRoute)({
+var getLikersRoute = (0, import_zod_openapi46.createRoute)({
   method: "get",
   path: "/pages/{id}/likers",
   tags: ["presence"],
@@ -4261,50 +4385,50 @@ var presenceRoutes = {
 };
 
 // src/contracts/draft.ts
-var import_zod_openapi46 = require("@hono/zod-openapi");
+var import_zod_openapi48 = require("@hono/zod-openapi");
 
 // src/schemas/draft.ts
-var import_zod_openapi45 = require("@hono/zod-openapi");
-var CreateDraftRequestSchema = import_zod_openapi45.z.object({
-  path: import_zod_openapi45.z.string().min(1),
-  initialBody: import_zod_openapi45.z.string().optional()
+var import_zod_openapi47 = require("@hono/zod-openapi");
+var CreateDraftRequestSchema = import_zod_openapi47.z.object({
+  path: import_zod_openapi47.z.string().min(1),
+  initialBody: import_zod_openapi47.z.string().optional()
 });
-var CreateDraftResponseSchema = import_zod_openapi45.z.object({
-  pageId: import_zod_openapi45.z.string()
+var CreateDraftResponseSchema = import_zod_openapi47.z.object({
+  pageId: import_zod_openapi47.z.string()
 });
-var DraftConflictOwnerSchema = import_zod_openapi45.z.object({
-  id: import_zod_openapi45.z.string(),
-  username: import_zod_openapi45.z.string(),
-  displayName: import_zod_openapi45.z.string()
+var DraftConflictOwnerSchema = import_zod_openapi47.z.object({
+  id: import_zod_openapi47.z.string(),
+  username: import_zod_openapi47.z.string(),
+  displayName: import_zod_openapi47.z.string()
 });
-var DraftPathConflictErrorSchema = import_zod_openapi45.z.object({
-  error: import_zod_openapi45.z.literal("path_taken_by_draft"),
+var DraftPathConflictErrorSchema = import_zod_openapi47.z.object({
+  error: import_zod_openapi47.z.literal("path_taken_by_draft"),
   owner: DraftConflictOwnerSchema,
-  message: import_zod_openapi45.z.string()
+  message: import_zod_openapi47.z.string()
 });
-var DraftBadRequestErrorSchema = import_zod_openapi45.z.object({
-  error: import_zod_openapi45.z.enum(["invalid_path", "path_taken"]),
-  message: import_zod_openapi45.z.string()
+var DraftBadRequestErrorSchema = import_zod_openapi47.z.object({
+  error: import_zod_openapi47.z.enum(["invalid_path", "path_taken"]),
+  message: import_zod_openapi47.z.string()
 });
-var DraftNotFoundErrorSchema = import_zod_openapi45.z.object({
-  error: import_zod_openapi45.z.literal("draft_not_found"),
-  message: import_zod_openapi45.z.string()
+var DraftNotFoundErrorSchema = import_zod_openapi47.z.object({
+  error: import_zod_openapi47.z.literal("draft_not_found"),
+  message: import_zod_openapi47.z.string()
 });
-var DraftSummarySchema = import_zod_openapi45.z.object({
-  pageId: import_zod_openapi45.z.string(),
-  path: import_zod_openapi45.z.string(),
-  createdAt: import_zod_openapi45.z.string(),
-  updatedAt: import_zod_openapi45.z.string()
+var DraftSummarySchema = import_zod_openapi47.z.object({
+  pageId: import_zod_openapi47.z.string(),
+  path: import_zod_openapi47.z.string(),
+  createdAt: import_zod_openapi47.z.string(),
+  updatedAt: import_zod_openapi47.z.string()
 });
-var ListDraftsResponseSchema = import_zod_openapi45.z.object({
-  drafts: import_zod_openapi45.z.array(DraftSummarySchema)
+var ListDraftsResponseSchema = import_zod_openapi47.z.object({
+  drafts: import_zod_openapi47.z.array(DraftSummarySchema)
 });
 
 // src/contracts/draft.ts
-var DraftIdPathParamsSchema = import_zod_openapi46.z.object({
-  id: import_zod_openapi46.z.string().openapi({ description: "Draft page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var DraftIdPathParamsSchema = import_zod_openapi48.z.object({
+  id: import_zod_openapi48.z.string().openapi({ description: "Draft page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var createDraftRoute = (0, import_zod_openapi46.createRoute)({
+var createDraftRoute = (0, import_zod_openapi48.createRoute)({
   method: "post",
   path: "/pages/drafts",
   tags: ["draft"],
@@ -4334,7 +4458,7 @@ var createDraftRoute = (0, import_zod_openapi46.createRoute)({
     }
   }
 });
-var listDraftsRoute = (0, import_zod_openapi46.createRoute)({
+var listDraftsRoute = (0, import_zod_openapi48.createRoute)({
   method: "get",
   path: "/pages/drafts",
   tags: ["draft"],
@@ -4351,7 +4475,7 @@ var listDraftsRoute = (0, import_zod_openapi46.createRoute)({
     }
   }
 });
-var cancelDraftRoute = (0, import_zod_openapi46.createRoute)({
+var cancelDraftRoute = (0, import_zod_openapi48.createRoute)({
   method: "delete",
   path: "/pages/drafts/{id}",
   tags: ["draft"],
@@ -4382,42 +4506,8 @@ var draftRoutes = {
 };
 
 // src/contracts/autocomplete.ts
-var import_zod_openapi48 = require("@hono/zod-openapi");
-
-// src/schemas/autocomplete.ts
-var import_zod_openapi47 = require("@hono/zod-openapi");
-var AutocompleteRequestSchema = import_zod_openapi47.z.object({
-  q: import_zod_openapi47.z.string().min(1).max(128),
-  limit: import_zod_openapi47.z.coerce.number().int().min(1).max(25).optional().default(10),
-  /**
-   * How `q` is matched against the candidate text. `'substring'` (the
-   * default, used by the editor's `@mention` / `[[wikilink]]` pickers)
-   * keeps the historical anywhere-in-string match. `'prefix'` anchors
-   * the match at the start — used by the "create page" modal, where the
-   * user is building a `/`-rooted path and only true prefixes are valid
-   * completions of what they have typed so far.
-   */
-  anchor: import_zod_openapi47.z.enum(["substring", "prefix"]).optional().default("substring")
-});
-var AutocompleteResultSchema = import_zod_openapi47.z.object({
-  id: import_zod_openapi47.z.string(),
-  label: import_zod_openapi47.z.string(),
-  display: import_zod_openapi47.z.string(),
-  avatar: import_zod_openapi47.z.string().nullable().optional(),
-  modifiedAt: import_zod_openapi47.z.string().nullable().optional(),
-  score: import_zod_openapi47.z.number()
-});
-var AutocompleteResponseSchema = import_zod_openapi47.z.object({
-  results: import_zod_openapi47.z.array(AutocompleteResultSchema)
-});
-var AutocompleteRateLimitErrorSchema = import_zod_openapi47.z.object({
-  error: import_zod_openapi47.z.literal("rate_limited"),
-  message: import_zod_openapi47.z.string(),
-  retryAfterSeconds: import_zod_openapi47.z.number()
-});
-
-// src/contracts/autocomplete.ts
-var autocompleteUsersRoute = (0, import_zod_openapi48.createRoute)({
+var import_zod_openapi49 = require("@hono/zod-openapi");
+var autocompleteUsersRoute = (0, import_zod_openapi49.createRoute)({
   method: "get",
   path: "/users/autocomplete",
   tags: ["autocomplete"],
@@ -4445,7 +4535,7 @@ var autocompleteUsersRoute = (0, import_zod_openapi48.createRoute)({
     }
   }
 });
-var autocompletePagesRoute = (0, import_zod_openapi48.createRoute)({
+var autocompletePagesRoute = (0, import_zod_openapi49.createRoute)({
   method: "get",
   path: "/pages/autocomplete",
   tags: ["autocomplete"],
@@ -4479,50 +4569,50 @@ var autocompleteRoutes = {
 };
 
 // src/contracts/attachment.ts
-var import_zod_openapi50 = require("@hono/zod-openapi");
+var import_zod_openapi51 = require("@hono/zod-openapi");
 
 // src/schemas/attachment.ts
-var import_zod_openapi49 = require("@hono/zod-openapi");
-var AttachmentSchema = import_zod_openapi49.z.object({
-  _id: import_zod_openapi49.z.string(),
-  page: import_zod_openapi49.z.string(),
+var import_zod_openapi50 = require("@hono/zod-openapi");
+var AttachmentSchema = import_zod_openapi50.z.object({
+  _id: import_zod_openapi50.z.string(),
+  page: import_zod_openapi50.z.string(),
   creator: UserPublicSchema,
-  filePath: import_zod_openapi49.z.string(),
-  fileName: import_zod_openapi49.z.string(),
-  originalName: import_zod_openapi49.z.string(),
-  fileFormat: import_zod_openapi49.z.string(),
-  fileSize: import_zod_openapi49.z.number(),
-  createdAt: import_zod_openapi49.z.string(),
-  url: import_zod_openapi49.z.string(),
-  inUse: import_zod_openapi49.z.boolean()
+  filePath: import_zod_openapi50.z.string(),
+  fileName: import_zod_openapi50.z.string(),
+  originalName: import_zod_openapi50.z.string(),
+  fileFormat: import_zod_openapi50.z.string(),
+  fileSize: import_zod_openapi50.z.number(),
+  createdAt: import_zod_openapi50.z.string(),
+  url: import_zod_openapi50.z.string(),
+  inUse: import_zod_openapi50.z.boolean()
 });
 var AttachmentMetaSchema = AttachmentSchema.omit({ inUse: true });
-var ListAttachmentsResponseSchema = import_zod_openapi49.z.object({
-  attachments: import_zod_openapi49.z.array(AttachmentSchema)
+var ListAttachmentsResponseSchema = import_zod_openapi50.z.object({
+  attachments: import_zod_openapi50.z.array(AttachmentSchema)
 });
-var PastAttachmentUsageSchema = import_zod_openapi49.z.object({
+var PastAttachmentUsageSchema = import_zod_openapi50.z.object({
   attachment: AttachmentSchema,
-  referencingRevisions: import_zod_openapi49.z.array(
-    import_zod_openapi49.z.object({
-      revisionId: import_zod_openapi49.z.string(),
-      createdAt: import_zod_openapi49.z.string(),
+  referencingRevisions: import_zod_openapi50.z.array(
+    import_zod_openapi50.z.object({
+      revisionId: import_zod_openapi50.z.string(),
+      createdAt: import_zod_openapi50.z.string(),
       author: UserPublicSchema
     })
   )
 });
-var AttachmentUsageResponseSchema = import_zod_openapi49.z.object({
-  pagePath: import_zod_openapi49.z.string(),
-  latest: import_zod_openapi49.z.array(AttachmentSchema),
-  past: import_zod_openapi49.z.array(PastAttachmentUsageSchema)
+var AttachmentUsageResponseSchema = import_zod_openapi50.z.object({
+  pagePath: import_zod_openapi50.z.string(),
+  latest: import_zod_openapi50.z.array(AttachmentSchema),
+  past: import_zod_openapi50.z.array(PastAttachmentUsageSchema)
 });
-var AddAttachmentResponseSchema = import_zod_openapi49.z.object({
+var AddAttachmentResponseSchema = import_zod_openapi50.z.object({
   attachment: AttachmentSchema,
-  url: import_zod_openapi49.z.string()
+  url: import_zod_openapi50.z.string()
 });
-var RemoveAttachmentResponseSchema = import_zod_openapi49.z.object({
-  success: import_zod_openapi49.z.literal(true)
+var RemoveAttachmentResponseSchema = import_zod_openapi50.z.object({
+  success: import_zod_openapi50.z.literal(true)
 });
-var AttachmentErrorCodeSchema = import_zod_openapi49.z.enum([
+var AttachmentErrorCodeSchema = import_zod_openapi50.z.enum([
   "INVALID_PAGE_ID",
   "PAGE_NOT_FOUND",
   "FILE_MISSING",
@@ -4534,43 +4624,43 @@ var AttachmentErrorCodeSchema = import_zod_openapi49.z.enum([
   "UPLOAD_FAILED",
   "REMOVE_FAILED"
 ]);
-var AttachmentErrorSchema = import_zod_openapi49.z.object({
-  error: import_zod_openapi49.z.object({
+var AttachmentErrorSchema = import_zod_openapi50.z.object({
+  error: import_zod_openapi50.z.object({
     code: AttachmentErrorCodeSchema,
-    message: import_zod_openapi49.z.string()
+    message: import_zod_openapi50.z.string()
   })
 });
-var UploadAttachmentResponseSchema = import_zod_openapi49.z.object({
-  url: import_zod_openapi49.z.string(),
-  filename: import_zod_openapi49.z.string(),
-  mimeType: import_zod_openapi49.z.string(),
-  sizeBytes: import_zod_openapi49.z.number()
+var UploadAttachmentResponseSchema = import_zod_openapi50.z.object({
+  url: import_zod_openapi50.z.string(),
+  filename: import_zod_openapi50.z.string(),
+  mimeType: import_zod_openapi50.z.string(),
+  sizeBytes: import_zod_openapi50.z.number()
 });
-var UploadAttachmentErrorCodeSchema = import_zod_openapi49.z.enum(["too_large", "disallowed_type", "rate_limited", "no_permission"]);
-var UploadAttachmentErrorSchema = import_zod_openapi49.z.object({
+var UploadAttachmentErrorCodeSchema = import_zod_openapi50.z.enum(["too_large", "disallowed_type", "rate_limited", "no_permission"]);
+var UploadAttachmentErrorSchema = import_zod_openapi50.z.object({
   error: UploadAttachmentErrorCodeSchema,
-  message: import_zod_openapi49.z.string(),
-  details: import_zod_openapi49.z.record(import_zod_openapi49.z.string(), import_zod_openapi49.z.unknown()).optional()
+  message: import_zod_openapi50.z.string(),
+  details: import_zod_openapi50.z.record(import_zod_openapi50.z.string(), import_zod_openapi50.z.unknown()).optional()
 });
 var IMAGE_UPLOAD_MIME = ["image/png", "image/jpeg", "image/gif", "image/webp", "image/svg+xml"];
 var DND_EXTRA_UPLOAD_MIME = ["application/pdf", "text/plain", "text/markdown", "text/csv", "application/zip"];
 
 // src/contracts/attachment.ts
-var PageIdPathParamsSchema3 = import_zod_openapi50.z.object({
-  pageId: import_zod_openapi50.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var PageIdPathParamsSchema3 = import_zod_openapi51.z.object({
+  pageId: import_zod_openapi51.z.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var AttachmentIdPathParamsSchema = import_zod_openapi50.z.object({
-  id: import_zod_openapi50.z.string().openapi({ description: "Attachment id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var AttachmentIdPathParamsSchema = import_zod_openapi51.z.object({
+  id: import_zod_openapi51.z.string().openapi({ description: "Attachment id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var AddAttachmentBodySchema = import_zod_openapi50.z.object({
-  file: import_zod_openapi50.z.any().openapi({ type: "string", format: "binary" }).optional()
+var AddAttachmentBodySchema = import_zod_openapi51.z.object({
+  file: import_zod_openapi51.z.any().openapi({ type: "string", format: "binary" }).optional()
 });
-var UploadAttachmentBodySchema = import_zod_openapi50.z.object({
-  file: import_zod_openapi50.z.any().openapi({ type: "string", format: "binary" }).optional(),
-  pageId: import_zod_openapi50.z.string().optional(),
-  intent: import_zod_openapi50.z.string().optional().openapi({ enum: ["paste", "dnd"] })
+var UploadAttachmentBodySchema = import_zod_openapi51.z.object({
+  file: import_zod_openapi51.z.any().openapi({ type: "string", format: "binary" }).optional(),
+  pageId: import_zod_openapi51.z.string().optional(),
+  intent: import_zod_openapi51.z.string().optional().openapi({ enum: ["paste", "dnd"] })
 });
-var listAttachmentsRoute = (0, import_zod_openapi50.createRoute)({
+var listAttachmentsRoute = (0, import_zod_openapi51.createRoute)({
   method: "get",
   path: "/pages/{pageId}/attachments",
   tags: ["attachment"],
@@ -4602,7 +4692,7 @@ var listAttachmentsRoute = (0, import_zod_openapi50.createRoute)({
     }
   }
 });
-var addAttachmentRoute = (0, import_zod_openapi50.createRoute)({
+var addAttachmentRoute = (0, import_zod_openapi51.createRoute)({
   method: "post",
   path: "/pages/{pageId}/attachments",
   tags: ["attachment"],
@@ -4641,7 +4731,7 @@ var addAttachmentRoute = (0, import_zod_openapi50.createRoute)({
     }
   }
 });
-var getAttachmentUsageRoute = (0, import_zod_openapi50.createRoute)({
+var getAttachmentUsageRoute = (0, import_zod_openapi51.createRoute)({
   method: "get",
   path: "/pages/{pageId}/attachments/usage",
   tags: ["attachment"],
@@ -4673,7 +4763,7 @@ var getAttachmentUsageRoute = (0, import_zod_openapi50.createRoute)({
     }
   }
 });
-var getAttachmentMetaRoute = (0, import_zod_openapi50.createRoute)({
+var getAttachmentMetaRoute = (0, import_zod_openapi51.createRoute)({
   method: "get",
   path: "/attachments/{id}/meta",
   tags: ["attachment"],
@@ -4705,7 +4795,7 @@ var getAttachmentMetaRoute = (0, import_zod_openapi50.createRoute)({
     }
   }
 });
-var uploadAttachmentRoute = (0, import_zod_openapi50.createRoute)({
+var uploadAttachmentRoute = (0, import_zod_openapi51.createRoute)({
   method: "post",
   path: "/attachments/upload",
   tags: ["attachment"],
@@ -4751,7 +4841,7 @@ var uploadAttachmentRoute = (0, import_zod_openapi50.createRoute)({
     }
   }
 });
-var removeAttachmentRoute = (0, import_zod_openapi50.createRoute)({
+var removeAttachmentRoute = (0, import_zod_openapi51.createRoute)({
   method: "delete",
   path: "/attachments/{id}",
   tags: ["attachment"],
@@ -4802,37 +4892,37 @@ var attachmentRoutes = {
 };
 
 // src/contracts/search.ts
-var import_zod_openapi52 = require("@hono/zod-openapi");
+var import_zod_openapi53 = require("@hono/zod-openapi");
 
 // src/schemas/search.ts
-var import_zod_openapi51 = require("@hono/zod-openapi");
-var SearchPageTypeSchema = import_zod_openapi51.z.enum(["portal", "public", "user"]);
-var SearchPagesRequestSchema = import_zod_openapi51.z.object({
-  q: import_zod_openapi51.z.string().min(1),
-  tree: import_zod_openapi51.z.string().optional(),
+var import_zod_openapi52 = require("@hono/zod-openapi");
+var SearchPageTypeSchema = import_zod_openapi52.z.enum(["portal", "public", "user"]);
+var SearchPagesRequestSchema = import_zod_openapi52.z.object({
+  q: import_zod_openapi52.z.string().min(1),
+  tree: import_zod_openapi52.z.string().optional(),
   type: SearchPageTypeSchema.optional(),
-  page: import_zod_openapi51.z.coerce.number().int().min(1).default(1),
-  limit: import_zod_openapi51.z.coerce.number().int().min(1).max(100).default(50)
-});
-var SearchHitSchema = import_zod_openapi51.z.object({
-  pageId: import_zod_openapi51.z.string(),
-  path: import_zod_openapi51.z.string(),
-  score: import_zod_openapi51.z.number().optional(),
-  snippet: import_zod_openapi51.z.string().optional(),
-  bookmarkCount: import_zod_openapi51.z.number(),
+  page: import_zod_openapi52.z.coerce.number().int().min(1).default(1),
+  limit: import_zod_openapi52.z.coerce.number().int().min(1).max(100).default(50)
+});
+var SearchHitSchema = import_zod_openapi52.z.object({
+  pageId: import_zod_openapi52.z.string(),
+  path: import_zod_openapi52.z.string(),
+  score: import_zod_openapi52.z.number().optional(),
+  snippet: import_zod_openapi52.z.string().optional(),
+  bookmarkCount: import_zod_openapi52.z.number(),
   page: PageSchema
 });
-var SearchPagesResponseSchema = import_zod_openapi51.z.object({
-  meta: import_zod_openapi51.z.object({
-    took: import_zod_openapi51.z.number().optional(),
-    total: import_zod_openapi51.z.number(),
-    results: import_zod_openapi51.z.number()
+var SearchPagesResponseSchema = import_zod_openapi52.z.object({
+  meta: import_zod_openapi52.z.object({
+    took: import_zod_openapi52.z.number().optional(),
+    total: import_zod_openapi52.z.number(),
+    results: import_zod_openapi52.z.number()
   }),
-  data: import_zod_openapi51.z.array(SearchHitSchema)
+  data: import_zod_openapi52.z.array(SearchHitSchema)
 });
 
 // src/contracts/search.ts
-var searchPagesRoute = (0, import_zod_openapi52.createRoute)({
+var searchPagesRoute = (0, import_zod_openapi53.createRoute)({
   method: "get",
   path: "/search",
   tags: ["search"],
@@ -4869,39 +4959,39 @@ var searchRoutes = {
 };
 
 // src/contracts/adminCrypto.ts
-var import_zod_openapi54 = require("@hono/zod-openapi");
+var import_zod_openapi55 = require("@hono/zod-openapi");
 
 // src/schemas/adminCrypto.ts
-var import_zod_openapi53 = require("@hono/zod-openapi");
-var SensitiveConfigEntrySchema = import_zod_openapi53.z.object({
-  ns: import_zod_openapi53.z.string(),
-  key: import_zod_openapi53.z.string(),
-  present: import_zod_openapi53.z.boolean(),
-  encrypted: import_zod_openapi53.z.boolean()
+var import_zod_openapi54 = require("@hono/zod-openapi");
+var SensitiveConfigEntrySchema = import_zod_openapi54.z.object({
+  ns: import_zod_openapi54.z.string(),
+  key: import_zod_openapi54.z.string(),
+  present: import_zod_openapi54.z.boolean(),
+  encrypted: import_zod_openapi54.z.boolean()
 });
-var CryptoStatusResponseSchema = import_zod_openapi53.z.object({
+var CryptoStatusResponseSchema = import_zod_openapi54.z.object({
   /** False when CROWI_ENCRYPTION_KEY is not configured — UI shows a setup hint. */
-  encryptionConfigured: import_zod_openapi53.z.boolean(),
-  unencryptedCount: import_zod_openapi53.z.number().int().min(0),
-  encryptedCount: import_zod_openapi53.z.number().int().min(0),
-  entries: import_zod_openapi53.z.array(SensitiveConfigEntrySchema)
+  encryptionConfigured: import_zod_openapi54.z.boolean(),
+  unencryptedCount: import_zod_openapi54.z.number().int().min(0),
+  encryptedCount: import_zod_openapi54.z.number().int().min(0),
+  entries: import_zod_openapi54.z.array(SensitiveConfigEntrySchema)
 });
-var ReencryptResponseSchema = import_zod_openapi53.z.object({
-  rewritten: import_zod_openapi53.z.number().int().min(0),
+var ReencryptResponseSchema = import_zod_openapi54.z.object({
+  rewritten: import_zod_openapi54.z.number().int().min(0),
   /** Already encrypted, skipped on this run. */
-  alreadyEncrypted: import_zod_openapi53.z.number().int().min(0),
+  alreadyEncrypted: import_zod_openapi54.z.number().int().min(0),
   /** Sensitive registry entries that had no row in the DB at all. */
-  missing: import_zod_openapi53.z.number().int().min(0)
+  missing: import_zod_openapi54.z.number().int().min(0)
 });
-var EncryptionNotConfiguredErrorSchema = import_zod_openapi53.z.object({
-  error: import_zod_openapi53.z.object({
-    code: import_zod_openapi53.z.literal("ENCRYPTION_NOT_CONFIGURED"),
-    message: import_zod_openapi53.z.string()
+var EncryptionNotConfiguredErrorSchema = import_zod_openapi54.z.object({
+  error: import_zod_openapi54.z.object({
+    code: import_zod_openapi54.z.literal("ENCRYPTION_NOT_CONFIGURED"),
+    message: import_zod_openapi54.z.string()
   })
 });
 
 // src/contracts/adminCrypto.ts
-var getCryptoStatusRoute = (0, import_zod_openapi54.createRoute)({
+var getCryptoStatusRoute = (0, import_zod_openapi55.createRoute)({
   method: "get",
   path: "/admin/crypto/status",
   tags: ["adminCrypto"],
@@ -4926,7 +5016,7 @@ var getCryptoStatusRoute = (0, import_zod_openapi54.createRoute)({
     }
   }
 });
-var reencryptAllRoute = (0, import_zod_openapi54.createRoute)({
+var reencryptAllRoute = (0, import_zod_openapi55.createRoute)({
   method: "post",
   path: "/admin/crypto/reencrypt",
   tags: ["adminCrypto"],
@@ -4961,56 +5051,56 @@ var adminCryptoRoutes = {
 };
 
 // src/contracts/admin/app.ts
-var import_zod_openapi56 = require("@hono/zod-openapi");
+var import_zod_openapi57 = require("@hono/zod-openapi");
 
 // src/schemas/admin/app.ts
-var import_zod_openapi55 = require("@hono/zod-openapi");
-var GetAppSettingsResponseSchema = import_zod_openapi55.z.object({
-  app: import_zod_openapi55.z.object({
-    title: import_zod_openapi55.z.string(),
-    confidential: import_zod_openapi55.z.string()
+var import_zod_openapi56 = require("@hono/zod-openapi");
+var GetAppSettingsResponseSchema = import_zod_openapi56.z.object({
+  app: import_zod_openapi56.z.object({
+    title: import_zod_openapi56.z.string(),
+    confidential: import_zod_openapi56.z.string()
   }),
   /**
    * Whether a storage driver is registered (i.e. uploads are wired up).
    * Sourced from `Config.isUploadable()` which now consults PluginManager.
    */
-  isUploadable: import_zod_openapi55.z.boolean(),
+  isUploadable: import_zod_openapi56.z.boolean(),
   /**
    * The Open / Restricted / Closed → open / restricted / closed mapping the
    * legacy admin controller exposed. Useful for the UI to render the current
    * registration mode label without knowing the internal capitalisation.
    */
-  registrationMode: import_zod_openapi55.z.record(import_zod_openapi55.z.string(), import_zod_openapi55.z.string()),
+  registrationMode: import_zod_openapi56.z.record(import_zod_openapi56.z.string(), import_zod_openapi56.z.string()),
   /**
    * Whether the admin has dismissed the initial-setup checklist on the
    * dashboard. Persisted server-side (`app:setupChecklistDismissed`) so the
    * dismissal holds across browsers and devices, not just one localStorage.
    */
-  setupChecklistDismissed: import_zod_openapi55.z.boolean()
+  setupChecklistDismissed: import_zod_openapi56.z.boolean()
 });
-var UpdateAppSettingsRequestSchema = import_zod_openapi55.z.object({
-  app: import_zod_openapi55.z.object({
-    title: import_zod_openapi55.z.string().trim().min(1).max(100).optional(),
-    confidential: import_zod_openapi55.z.string().max(500).optional()
+var UpdateAppSettingsRequestSchema = import_zod_openapi56.z.object({
+  app: import_zod_openapi56.z.object({
+    title: import_zod_openapi56.z.string().trim().min(1).max(100).optional(),
+    confidential: import_zod_openapi56.z.string().max(500).optional()
   }).optional(),
   /**
    * Toggle the dashboard initial-setup checklist's dismissed state. Sent on
    * its own (without the `app` block) when the admin clicks "mark as done".
    */
-  setupChecklistDismissed: import_zod_openapi55.z.boolean().optional()
+  setupChecklistDismissed: import_zod_openapi56.z.boolean().optional()
 }).strict();
-var UpdateAppSettingsResponseSchema = import_zod_openapi55.z.object({
-  ok: import_zod_openapi55.z.literal(true)
-});
-var AppSettingsValidationErrorSchema = import_zod_openapi55.z.object({
-  bodyResult: import_zod_openapi55.z.object({
-    issues: import_zod_openapi55.z.array(
-      import_zod_openapi55.z.object({
-        path: import_zod_openapi55.z.array(import_zod_openapi55.z.union([import_zod_openapi55.z.string(), import_zod_openapi55.z.number()])),
-        message: import_zod_openapi55.z.string()
+var UpdateAppSettingsResponseSchema = import_zod_openapi56.z.object({
+  ok: import_zod_openapi56.z.literal(true)
+});
+var AppSettingsValidationErrorSchema = import_zod_openapi56.z.object({
+  bodyResult: import_zod_openapi56.z.object({
+    issues: import_zod_openapi56.z.array(
+      import_zod_openapi56.z.object({
+        path: import_zod_openapi56.z.array(import_zod_openapi56.z.union([import_zod_openapi56.z.string(), import_zod_openapi56.z.number()])),
+        message: import_zod_openapi56.z.string()
       })
     ),
-    name: import_zod_openapi55.z.string().optional()
+    name: import_zod_openapi56.z.string().optional()
   })
 });
 
@@ -5031,7 +5121,7 @@ var appSettingsValidationHook = (result, c) => {
     400
   );
 };
-var getAppSettingsRoute = (0, import_zod_openapi56.createRoute)({
+var getAppSettingsRoute = (0, import_zod_openapi57.createRoute)({
   method: "get",
   path: "/admin/app",
   tags: ["admin.app"],
@@ -5052,7 +5142,7 @@ var getAppSettingsRoute = (0, import_zod_openapi56.createRoute)({
     }
   }
 });
-var updateAppSettingsRoute = (0, import_zod_openapi56.createRoute)({
+var updateAppSettingsRoute = (0, import_zod_openapi57.createRoute)({
   method: "put",
   path: "/admin/app",
   tags: ["admin.app"],
@@ -5089,26 +5179,26 @@ var adminAppRoutes = {
 };
 
 // src/contracts/admin/auth.ts
-var import_zod_openapi58 = require("@hono/zod-openapi");
+var import_zod_openapi59 = require("@hono/zod-openapi");
 
 // src/schemas/admin/auth.ts
-var import_zod_openapi57 = require("@hono/zod-openapi");
-var AuthSettingsSchema = import_zod_openapi57.z.object({
-  requireThirdPartyAuth: import_zod_openapi57.z.boolean(),
-  disablePasswordAuth: import_zod_openapi57.z.boolean()
+var import_zod_openapi58 = require("@hono/zod-openapi");
+var AuthSettingsSchema = import_zod_openapi58.z.object({
+  requireThirdPartyAuth: import_zod_openapi58.z.boolean(),
+  disablePasswordAuth: import_zod_openapi58.z.boolean()
 });
 var UpdateAuthSettingsRequestSchema = AuthSettingsSchema;
 var GetAuthSettingsResponseSchema = AuthSettingsSchema;
 var UpdateAuthSettingsResponseSchema = AuthSettingsSchema;
-var ThirdPartyAuthUnavailableErrorSchema = import_zod_openapi57.z.object({
-  error: import_zod_openapi57.z.object({
-    code: import_zod_openapi57.z.literal("THIRD_PARTY_AUTH_UNAVAILABLE"),
-    message: import_zod_openapi57.z.string()
+var ThirdPartyAuthUnavailableErrorSchema = import_zod_openapi58.z.object({
+  error: import_zod_openapi58.z.object({
+    code: import_zod_openapi58.z.literal("THIRD_PARTY_AUTH_UNAVAILABLE"),
+    message: import_zod_openapi58.z.string()
   })
 });
 
 // src/contracts/admin/auth.ts
-var getAuthSettingsRoute = (0, import_zod_openapi58.createRoute)({
+var getAuthSettingsRoute = (0, import_zod_openapi59.createRoute)({
   method: "get",
   path: "/admin/auth",
   tags: ["admin.auth"],
@@ -5133,7 +5223,7 @@ var getAuthSettingsRoute = (0, import_zod_openapi58.createRoute)({
     }
   }
 });
-var updateAuthSettingsRoute = (0, import_zod_openapi58.createRoute)({
+var updateAuthSettingsRoute = (0, import_zod_openapi59.createRoute)({
   method: "put",
   path: "/admin/auth",
   tags: ["admin.auth"],
@@ -5173,44 +5263,44 @@ var adminAuthRoutes = {
 };
 
 // src/contracts/admin/mail.ts
-var import_zod_openapi60 = require("@hono/zod-openapi");
+var import_zod_openapi61 = require("@hono/zod-openapi");
 
 // src/schemas/admin/mail.ts
-var import_zod_openapi59 = require("@hono/zod-openapi");
-var GetMailSettingsResponseSchema = import_zod_openapi59.z.object({
-  from: import_zod_openapi59.z.string(),
-  activeDriver: import_zod_openapi59.z.string(),
+var import_zod_openapi60 = require("@hono/zod-openapi");
+var GetMailSettingsResponseSchema = import_zod_openapi60.z.object({
+  from: import_zod_openapi60.z.string(),
+  activeDriver: import_zod_openapi60.z.string(),
   /** npm name of the plugin that registered the active driver, for
    * linking to its config page. Empty when no sender is active. */
-  activePlugin: import_zod_openapi59.z.string()
+  activePlugin: import_zod_openapi60.z.string()
 });
-var UpdateMailSettingsRequestSchema = import_zod_openapi59.z.object({
-  from: import_zod_openapi59.z.string().trim().max(254).optional()
+var UpdateMailSettingsRequestSchema = import_zod_openapi60.z.object({
+  from: import_zod_openapi60.z.string().trim().max(254).optional()
 });
-var UpdateMailSettingsResponseSchema = import_zod_openapi59.z.object({
-  ok: import_zod_openapi59.z.literal(true)
+var UpdateMailSettingsResponseSchema = import_zod_openapi60.z.object({
+  ok: import_zod_openapi60.z.literal(true)
 });
-var SendTestMailRequestSchema = import_zod_openapi59.z.object({}).optional();
-var SendTestMailResponseSchema = import_zod_openapi59.z.object({
-  ok: import_zod_openapi59.z.literal(true),
+var SendTestMailRequestSchema = import_zod_openapi60.z.object({}).optional();
+var SendTestMailResponseSchema = import_zod_openapi60.z.object({
+  ok: import_zod_openapi60.z.literal(true),
   /** Address the test mail was dispatched to (= the calling admin's email). */
-  to: import_zod_openapi59.z.string()
+  to: import_zod_openapi60.z.string()
 });
-var SendTestMailErrorSchema = import_zod_openapi59.z.object({
-  error: import_zod_openapi59.z.object({
-    code: import_zod_openapi59.z.literal("MAIL_TEST_FAILED"),
-    message: import_zod_openapi59.z.string()
+var SendTestMailErrorSchema = import_zod_openapi60.z.object({
+  error: import_zod_openapi60.z.object({
+    code: import_zod_openapi60.z.literal("MAIL_TEST_FAILED"),
+    message: import_zod_openapi60.z.string()
   })
 });
-var MailSettingsValidationErrorSchema = import_zod_openapi59.z.object({
-  bodyResult: import_zod_openapi59.z.object({
-    issues: import_zod_openapi59.z.array(
-      import_zod_openapi59.z.object({
-        path: import_zod_openapi59.z.array(import_zod_openapi59.z.union([import_zod_openapi59.z.string(), import_zod_openapi59.z.number()])),
-        message: import_zod_openapi59.z.string()
+var MailSettingsValidationErrorSchema = import_zod_openapi60.z.object({
+  bodyResult: import_zod_openapi60.z.object({
+    issues: import_zod_openapi60.z.array(
+      import_zod_openapi60.z.object({
+        path: import_zod_openapi60.z.array(import_zod_openapi60.z.union([import_zod_openapi60.z.string(), import_zod_openapi60.z.number()])),
+        message: import_zod_openapi60.z.string()
       })
     ),
-    name: import_zod_openapi59.z.string().optional()
+    name: import_zod_openapi60.z.string().optional()
   })
 });
 
@@ -5231,7 +5321,7 @@ var mailSettingsValidationHook = (result, c) => {
     400
   );
 };
-var getMailSettingsRoute = (0, import_zod_openapi60.createRoute)({
+var getMailSettingsRoute = (0, import_zod_openapi61.createRoute)({
   method: "get",
   path: "/admin/mail",
   tags: ["admin.mail"],
@@ -5252,7 +5342,7 @@ var getMailSettingsRoute = (0, import_zod_openapi60.createRoute)({
     }
   }
 });
-var updateMailSettingsRoute = (0, import_zod_openapi60.createRoute)({
+var updateMailSettingsRoute = (0, import_zod_openapi61.createRoute)({
   method: "put",
   path: "/admin/mail",
   tags: ["admin.mail"],
@@ -5283,7 +5373,7 @@ var updateMailSettingsRoute = (0, import_zod_openapi60.createRoute)({
     }
   }
 });
-var sendTestMailRoute = (0, import_zod_openapi60.createRoute)({
+var sendTestMailRoute = (0, import_zod_openapi61.createRoute)({
   method: "post",
   path: "/admin/mail/test",
   tags: ["admin.mail"],
@@ -5325,30 +5415,30 @@ var adminMailRoutes = {
 };
 
 // src/contracts/admin/plugins.ts
-var import_zod_openapi62 = require("@hono/zod-openapi");
+var import_zod_openapi63 = require("@hono/zod-openapi");
 
 // src/schemas/admin/plugins.ts
-var import_zod_openapi61 = require("@hono/zod-openapi");
-var PluginFieldSchema = import_zod_openapi61.z.object({
-  name: import_zod_openapi61.z.string(),
+var import_zod_openapi62 = require("@hono/zod-openapi");
+var PluginFieldSchema = import_zod_openapi62.z.object({
+  name: import_zod_openapi62.z.string(),
   /**
    * Localized display label. Falls back to `name` in the form when absent.
    * Filled from the plugin's `configI18n[locale]` overlay by the admin API.
    */
-  label: import_zod_openapi61.z.string().optional(),
-  kind: import_zod_openapi61.z.enum(["string", "secret", "number", "boolean", "enum", "string-array"]),
-  description: import_zod_openapi61.z.string().optional(),
-  defaultValue: import_zod_openapi61.z.unknown().optional(),
-  options: import_zod_openapi61.z.array(import_zod_openapi61.z.string()).optional(),
-  action: import_zod_openapi61.z.object({
-    label: import_zod_openapi61.z.string(),
-    method: import_zod_openapi61.z.string(),
-    path: import_zod_openapi61.z.string()
+  label: import_zod_openapi62.z.string().optional(),
+  kind: import_zod_openapi62.z.enum(["string", "secret", "number", "boolean", "enum", "string-array"]),
+  description: import_zod_openapi62.z.string().optional(),
+  defaultValue: import_zod_openapi62.z.unknown().optional(),
+  options: import_zod_openapi62.z.array(import_zod_openapi62.z.string()).optional(),
+  action: import_zod_openapi62.z.object({
+    label: import_zod_openapi62.z.string(),
+    method: import_zod_openapi62.z.string(),
+    path: import_zod_openapi62.z.string()
   }).optional(),
-  optional: import_zod_openapi61.z.boolean()
+  optional: import_zod_openapi62.z.boolean()
 });
-var AdminSidebarSection = import_zod_openapi61.z.enum(["settings", "shared", "storage", "mail", "notification", "auth", "search", "renderer", "platform"]);
-var PluginAdminPlacementSchema = import_zod_openapi61.z.object({
+var AdminSidebarSection = import_zod_openapi62.z.enum(["settings", "shared", "storage", "mail", "notification", "auth", "search", "renderer", "platform"]);
+var PluginAdminPlacementSchema = import_zod_openapi62.z.object({
   /**
    * Sidebar section to surface this plugin under. The runtime fills
    * this in — it's either declared by the plugin via `adminPlacement`
@@ -5357,21 +5447,28 @@ var PluginAdminPlacementSchema = import_zod_openapi61.z.object({
    */
   section: AdminSidebarSection,
   /** Display label (defaults to the plugin's npm name). */
-  label: import_zod_openapi61.z.string(),
+  label: import_zod_openapi62.z.string(),
   /** Lucide icon name from a fixed allow-list. */
-  icon: import_zod_openapi61.z.string().optional()
+  icon: import_zod_openapi62.z.string().optional()
 });
-var PluginInfoSchema = import_zod_openapi61.z.object({
-  name: import_zod_openapi61.z.string(),
-  version: import_zod_openapi61.z.string(),
-  requires: import_zod_openapi61.z.array(import_zod_openapi61.z.string()).optional(),
+var PluginInfoSchema = import_zod_openapi62.z.object({
+  name: import_zod_openapi62.z.string(),
+  version: import_zod_openapi62.z.string(),
+  requires: import_zod_openapi62.z.array(import_zod_openapi62.z.string()).optional(),
+  /**
+   * Core Mongoose model names this plugin declared in its
+   * `CrowiPlugin.modelAccess` allow-list — the only models it may
+   * reach via `ctx.model(name)`. Surfaced so an admin can audit which
+   * plugins touch which core collections.
+   */
+  modelAccess: import_zod_openapi62.z.array(import_zod_openapi62.z.string()).optional(),
   /** Has a configSchema (= showable config form). */
-  hasConfig: import_zod_openapi61.z.boolean(),
+  hasConfig: import_zod_openapi62.z.boolean(),
   /**
    * Driver-registry slots this plugin currently fills. Useful for the
    * admin "this plugin is the active storage driver" badge.
    */
-  registers: import_zod_openapi61.z.array(import_zod_openapi61.z.string()),
+  registers: import_zod_openapi62.z.array(import_zod_openapi62.z.string()),
   /**
    * Where the plugin appears in the admin sidebar. The server always
    * populates this even when the plugin didn't declare its own
@@ -5384,21 +5481,32 @@ var PluginInfoSchema = import_zod_openapi61.z.object({
    * still apply their config on the next server restart; plugins with
    * it apply config changes live.
    */
-  supportsHotReload: import_zod_openapi61.z.boolean()
+  supportsHotReload: import_zod_openapi62.z.boolean(),
+  /**
+   * `'failed'` means the plugin's `activate()` call threw during boot
+   * (see `PluginManager.getFailedPlugins()`) — it is not in the loaded
+   * set, has no live driver registration, and its config form is not
+   * reachable. `'active'` (the default) is every plugin that activated
+   * successfully. Defaults to `'active'` for wire back-compat with
+   * responses that predate this field.
+   */
+  status: import_zod_openapi62.z.enum(["active", "failed"]).default("active"),
+  /** Present only when `status: 'failed'` — the activation error message. */
+  error: import_zod_openapi62.z.string().optional()
 });
-var ListPluginsResponseSchema = import_zod_openapi61.z.object({
-  plugins: import_zod_openapi61.z.array(PluginInfoSchema)
+var ListPluginsResponseSchema = import_zod_openapi62.z.object({
+  plugins: import_zod_openapi62.z.array(PluginInfoSchema)
 });
-var PluginConfigResponseSchema = import_zod_openapi61.z.object({
-  name: import_zod_openapi61.z.string(),
-  fields: import_zod_openapi61.z.array(PluginFieldSchema),
-  values: import_zod_openapi61.z.record(import_zod_openapi61.z.string(), import_zod_openapi61.z.unknown())
+var PluginConfigResponseSchema = import_zod_openapi62.z.object({
+  name: import_zod_openapi62.z.string(),
+  fields: import_zod_openapi62.z.array(PluginFieldSchema),
+  values: import_zod_openapi62.z.record(import_zod_openapi62.z.string(), import_zod_openapi62.z.unknown())
 });
-var UpdatePluginConfigRequestSchema = import_zod_openapi61.z.object({
-  values: import_zod_openapi61.z.record(import_zod_openapi61.z.string(), import_zod_openapi61.z.unknown())
+var UpdatePluginConfigRequestSchema = import_zod_openapi62.z.object({
+  values: import_zod_openapi62.z.record(import_zod_openapi62.z.string(), import_zod_openapi62.z.unknown())
 });
-var UpdatePluginConfigResponseSchema = import_zod_openapi61.z.object({
-  ok: import_zod_openapi61.z.literal(true),
+var UpdatePluginConfigResponseSchema = import_zod_openapi62.z.object({
+  ok: import_zod_openapi62.z.literal(true),
   /**
    * Whether at least one plugin's `reconfigure` hook ran successfully
    * for this save. `true` means the new values are already live on
@@ -5408,44 +5516,44 @@ var UpdatePluginConfigResponseSchema = import_zod_openapi61.z.object({
    * "saved, but apply failed" warning in that case via the response
    * `reconfigureFailed` flag.
    */
-  hotReloaded: import_zod_openapi61.z.boolean(),
+  hotReloaded: import_zod_openapi62.z.boolean(),
   /**
    * True when at least one plugin's `reconfigure` was attempted and
    * threw. The save itself succeeded (Mongo + cache are updated) so
    * the next process boot will see the new values, but the *running*
    * process couldn't apply them. UI surfaces a warning toast.
    */
-  reconfigureFailed: import_zod_openapi61.z.boolean()
+  reconfigureFailed: import_zod_openapi62.z.boolean()
 });
-var PluginNotFoundErrorSchema = import_zod_openapi61.z.object({
-  error: import_zod_openapi61.z.object({
-    code: import_zod_openapi61.z.literal("PLUGIN_NOT_FOUND"),
-    message: import_zod_openapi61.z.string()
+var PluginNotFoundErrorSchema = import_zod_openapi62.z.object({
+  error: import_zod_openapi62.z.object({
+    code: import_zod_openapi62.z.literal("PLUGIN_NOT_FOUND"),
+    message: import_zod_openapi62.z.string()
   })
 });
-var PluginConfigValidationErrorSchema = import_zod_openapi61.z.object({
-  error: import_zod_openapi61.z.object({
-    code: import_zod_openapi61.z.literal("PLUGIN_CONFIG_VALIDATION_FAILED"),
-    message: import_zod_openapi61.z.string(),
-    issues: import_zod_openapi61.z.array(
-      import_zod_openapi61.z.object({
-        path: import_zod_openapi61.z.array(import_zod_openapi61.z.union([import_zod_openapi61.z.string(), import_zod_openapi61.z.number()])),
-        message: import_zod_openapi61.z.string()
+var PluginConfigValidationErrorSchema = import_zod_openapi62.z.object({
+  error: import_zod_openapi62.z.object({
+    code: import_zod_openapi62.z.literal("PLUGIN_CONFIG_VALIDATION_FAILED"),
+    message: import_zod_openapi62.z.string(),
+    issues: import_zod_openapi62.z.array(
+      import_zod_openapi62.z.object({
+        path: import_zod_openapi62.z.array(import_zod_openapi62.z.union([import_zod_openapi62.z.string(), import_zod_openapi62.z.number()])),
+        message: import_zod_openapi62.z.string()
       })
     )
   })
 });
-var ClearRenderCacheResponseSchema = import_zod_openapi61.z.object({
-  ok: import_zod_openapi61.z.literal(true),
-  clearedAt: import_zod_openapi61.z.string(),
+var ClearRenderCacheResponseSchema = import_zod_openapi62.z.object({
+  ok: import_zod_openapi62.z.literal(true),
+  clearedAt: import_zod_openapi62.z.string(),
   /** Number of cache rows removed. */
-  removedCount: import_zod_openapi61.z.number().int().min(0)
+  removedCount: import_zod_openapi62.z.number().int().min(0)
 });
 
 // src/contracts/admin/plugins.ts
-var PluginNameQuerySchema = import_zod_openapi62.z.object({ name: import_zod_openapi62.z.string() });
-var PluginConfigQuerySchema = import_zod_openapi62.z.object({ name: import_zod_openapi62.z.string(), locale: import_zod_openapi62.z.string().optional() });
-var listPluginsRoute = (0, import_zod_openapi62.createRoute)({
+var PluginNameQuerySchema = import_zod_openapi63.z.object({ name: import_zod_openapi63.z.string() });
+var PluginConfigQuerySchema = import_zod_openapi63.z.object({ name: import_zod_openapi63.z.string(), locale: import_zod_openapi63.z.string().optional() });
+var listPluginsRoute = (0, import_zod_openapi63.createRoute)({
   method: "get",
   path: "/admin/plugins",
   tags: ["admin.plugins"],
@@ -5470,7 +5578,7 @@ var listPluginsRoute = (0, import_zod_openapi62.createRoute)({
     }
   }
 });
-var getPluginConfigRoute = (0, import_zod_openapi62.createRoute)({
+var getPluginConfigRoute = (0, import_zod_openapi63.createRoute)({
   method: "get",
   path: "/admin/plugins/config",
   tags: ["admin.plugins"],
@@ -5502,7 +5610,7 @@ var getPluginConfigRoute = (0, import_zod_openapi62.createRoute)({
     }
   }
 });
-var updatePluginConfigRoute = (0, import_zod_openapi62.createRoute)({
+var updatePluginConfigRoute = (0, import_zod_openapi63.createRoute)({
   method: "put",
   path: "/admin/plugins/config",
   tags: ["admin.plugins"],
@@ -5541,8 +5649,8 @@ var updatePluginConfigRoute = (0, import_zod_openapi62.createRoute)({
     }
   }
 });
-var ClearRenderCacheBodySchema = import_zod_openapi62.z.object({}).optional();
-var clearRenderCacheAllRoute = (0, import_zod_openapi62.createRoute)({
+var ClearRenderCacheBodySchema = import_zod_openapi63.z.object({}).optional();
+var clearRenderCacheAllRoute = (0, import_zod_openapi63.createRoute)({
   method: "post",
   path: "/admin/plugins/render-cache/clear-all",
   tags: ["admin.plugins"],
@@ -5572,7 +5680,7 @@ var clearRenderCacheAllRoute = (0, import_zod_openapi62.createRoute)({
     }
   }
 });
-var clearRenderCachePluginRoute = (0, import_zod_openapi62.createRoute)({
+var clearRenderCachePluginRoute = (0, import_zod_openapi63.createRoute)({
   method: "post",
   path: "/admin/plugins/render-cache/clear-plugin",
   tags: ["admin.plugins"],
@@ -5616,28 +5724,28 @@ var adminPluginsRoutes = {
 };
 
 // src/contracts/admin/search.ts
-var import_zod_openapi64 = require("@hono/zod-openapi");
+var import_zod_openapi65 = require("@hono/zod-openapi");
 
 // src/schemas/admin/search.ts
-var import_zod_openapi63 = require("@hono/zod-openapi");
-var SearchDriverEntrySchema = import_zod_openapi63.z.object({
-  driverName: import_zod_openapi63.z.string(),
-  pluginName: import_zod_openapi63.z.string(),
-  isActive: import_zod_openapi63.z.boolean(),
-  supportsRebuild: import_zod_openapi63.z.boolean()
-});
-var ActiveSearchDriverSchema = import_zod_openapi63.z.object({
-  driverName: import_zod_openapi63.z.string(),
-  pluginName: import_zod_openapi63.z.string(),
-  supportsRebuild: import_zod_openapi63.z.boolean()
-});
-var GetSearchStatusResponseSchema = import_zod_openapi63.z.object({
+var import_zod_openapi64 = require("@hono/zod-openapi");
+var SearchDriverEntrySchema = import_zod_openapi64.z.object({
+  driverName: import_zod_openapi64.z.string(),
+  pluginName: import_zod_openapi64.z.string(),
+  isActive: import_zod_openapi64.z.boolean(),
+  supportsRebuild: import_zod_openapi64.z.boolean()
+});
+var ActiveSearchDriverSchema = import_zod_openapi64.z.object({
+  driverName: import_zod_openapi64.z.string(),
+  pluginName: import_zod_openapi64.z.string(),
+  supportsRebuild: import_zod_openapi64.z.boolean()
+});
+var GetSearchStatusResponseSchema = import_zod_openapi64.z.object({
   active: ActiveSearchDriverSchema.nullable(),
-  drivers: import_zod_openapi63.z.array(SearchDriverEntrySchema)
+  drivers: import_zod_openapi64.z.array(SearchDriverEntrySchema)
 });
 
 // src/contracts/admin/search.ts
-var getSearchStatusRoute = (0, import_zod_openapi64.createRoute)({
+var getSearchStatusRoute = (0, import_zod_openapi65.createRoute)({
   method: "get",
   path: "/admin/search",
   tags: ["admin.search"],
@@ -5667,21 +5775,21 @@ var adminSearchRoutes = {
 };
 
 // src/contracts/admin/security.ts
-var import_zod_openapi66 = require("@hono/zod-openapi");
+var import_zod_openapi67 = require("@hono/zod-openapi");
 
 // src/schemas/admin/security.ts
-var import_zod_openapi65 = require("@hono/zod-openapi");
-var RegistrationModeSchema = import_zod_openapi65.z.enum(["Open", "Resricted", "Closed"]);
-var SecuritySettingsSchema = import_zod_openapi65.z.object({
+var import_zod_openapi66 = require("@hono/zod-openapi");
+var RegistrationModeSchema = import_zod_openapi66.z.enum(["Open", "Resricted", "Closed"]);
+var SecuritySettingsSchema = import_zod_openapi66.z.object({
   registrationMode: RegistrationModeSchema,
-  registrationWhiteList: import_zod_openapi65.z.array(import_zod_openapi65.z.string())
+  registrationWhiteList: import_zod_openapi66.z.array(import_zod_openapi66.z.string())
 });
 var UpdateSecuritySettingsRequestSchema = SecuritySettingsSchema;
 var GetSecuritySettingsResponseSchema = SecuritySettingsSchema;
 var UpdateSecuritySettingsResponseSchema = SecuritySettingsSchema;
 
 // src/contracts/admin/security.ts
-var getSecuritySettingsRoute = (0, import_zod_openapi66.createRoute)({
+var getSecuritySettingsRoute = (0, import_zod_openapi67.createRoute)({
   method: "get",
   path: "/admin/security",
   tags: ["admin.security"],
@@ -5706,7 +5814,7 @@ var getSecuritySettingsRoute = (0, import_zod_openapi66.createRoute)({
     }
   }
 });
-var updateSecuritySettingsRoute = (0, import_zod_openapi66.createRoute)({
+var updateSecuritySettingsRoute = (0, import_zod_openapi67.createRoute)({
   method: "put",
   path: "/admin/security",
   tags: ["admin.security"],
@@ -5742,26 +5850,26 @@ var adminSecurityRoutes = {
 };
 
 // src/contracts/admin/storage.ts
-var import_zod_openapi68 = require("@hono/zod-openapi");
+var import_zod_openapi69 = require("@hono/zod-openapi");
 
 // src/schemas/admin/storage.ts
-var import_zod_openapi67 = require("@hono/zod-openapi");
-var StorageDriverEntrySchema = import_zod_openapi67.z.object({
-  driverName: import_zod_openapi67.z.string(),
-  pluginName: import_zod_openapi67.z.string(),
-  isActive: import_zod_openapi67.z.boolean()
+var import_zod_openapi68 = require("@hono/zod-openapi");
+var StorageDriverEntrySchema = import_zod_openapi68.z.object({
+  driverName: import_zod_openapi68.z.string(),
+  pluginName: import_zod_openapi68.z.string(),
+  isActive: import_zod_openapi68.z.boolean()
 });
-var ActiveStorageDriverSchema = import_zod_openapi67.z.object({
-  driverName: import_zod_openapi67.z.string(),
-  pluginName: import_zod_openapi67.z.string()
+var ActiveStorageDriverSchema = import_zod_openapi68.z.object({
+  driverName: import_zod_openapi68.z.string(),
+  pluginName: import_zod_openapi68.z.string()
 });
-var GetStorageStatusResponseSchema = import_zod_openapi67.z.object({
+var GetStorageStatusResponseSchema = import_zod_openapi68.z.object({
   active: ActiveStorageDriverSchema.nullable(),
-  drivers: import_zod_openapi67.z.array(StorageDriverEntrySchema)
+  drivers: import_zod_openapi68.z.array(StorageDriverEntrySchema)
 });
 
 // src/contracts/admin/storage.ts
-var getStorageStatusRoute = (0, import_zod_openapi68.createRoute)({
+var getStorageStatusRoute = (0, import_zod_openapi69.createRoute)({
   method: "get",
   path: "/admin/storage",
   tags: ["admin.storage"],
@@ -5791,94 +5899,94 @@ var adminStorageRoutes = {
 };
 
 // src/contracts/admin/users.ts
-var import_zod_openapi71 = require("@hono/zod-openapi");
+var import_zod_openapi72 = require("@hono/zod-openapi");
 
 // src/schemas/admin/users.ts
-var import_zod_openapi70 = require("@hono/zod-openapi");
+var import_zod_openapi71 = require("@hono/zod-openapi");
 
 // src/schemas/admin/_pager.ts
-var import_zod_openapi69 = require("@hono/zod-openapi");
-var AdminPagerSchema = import_zod_openapi69.z.object({
-  page: import_zod_openapi69.z.number(),
-  pagesCount: import_zod_openapi69.z.number(),
-  pages: import_zod_openapi69.z.array(import_zod_openapi69.z.number()),
-  total: import_zod_openapi69.z.number(),
-  previous: import_zod_openapi69.z.number().nullable(),
-  previousDots: import_zod_openapi69.z.boolean(),
-  next: import_zod_openapi69.z.number().nullable(),
-  nextDots: import_zod_openapi69.z.boolean()
+var import_zod_openapi70 = require("@hono/zod-openapi");
+var AdminPagerSchema = import_zod_openapi70.z.object({
+  page: import_zod_openapi70.z.number(),
+  pagesCount: import_zod_openapi70.z.number(),
+  pages: import_zod_openapi70.z.array(import_zod_openapi70.z.number()),
+  total: import_zod_openapi70.z.number(),
+  previous: import_zod_openapi70.z.number().nullable(),
+  previousDots: import_zod_openapi70.z.boolean(),
+  next: import_zod_openapi70.z.number().nullable(),
+  nextDots: import_zod_openapi70.z.boolean()
 });
 
 // src/schemas/admin/users.ts
-var ListAdminUsersRequestSchema = import_zod_openapi70.z.object({
-  q: import_zod_openapi70.z.string().optional(),
+var ListAdminUsersRequestSchema = import_zod_openapi71.z.object({
+  q: import_zod_openapi71.z.string().optional(),
   /**
    * Optional numeric user-status filter (see `UserStatusEnum`). When set, only
    * users in that status are returned — used by the "user approval" queue
    * screen to list `REGISTERED` (= awaiting admin approval) users.
    */
-  status: import_zod_openapi70.z.coerce.number().int().optional(),
-  page: import_zod_openapi70.z.coerce.number().int().min(1).optional().default(1),
-  limit: import_zod_openapi70.z.coerce.number().int().min(1).max(100).optional().default(50)
+  status: import_zod_openapi71.z.coerce.number().int().optional(),
+  page: import_zod_openapi71.z.coerce.number().int().min(1).optional().default(1),
+  limit: import_zod_openapi71.z.coerce.number().int().min(1).max(100).optional().default(50)
 });
-var ListAdminUsersResponseSchema = import_zod_openapi70.z.object({
-  users: import_zod_openapi70.z.array(UserPublicSchema),
+var ListAdminUsersResponseSchema = import_zod_openapi71.z.object({
+  users: import_zod_openapi71.z.array(UserPublicSchema),
   pager: AdminPagerSchema
 });
-var SearchAdminUsersByEmailRequestSchema = import_zod_openapi70.z.object({
-  email: import_zod_openapi70.z.string().min(1)
+var SearchAdminUsersByEmailRequestSchema = import_zod_openapi71.z.object({
+  email: import_zod_openapi71.z.string().min(1)
 });
-var SearchAdminUsersByEmailResponseSchema = import_zod_openapi70.z.object({
-  users: import_zod_openapi70.z.array(UserPublicSchema)
+var SearchAdminUsersByEmailResponseSchema = import_zod_openapi71.z.object({
+  users: import_zod_openapi71.z.array(UserPublicSchema)
 });
-var AdminUserIdParamSchema = import_zod_openapi70.z.object({
-  id: import_zod_openapi70.z.string()
+var AdminUserIdParamSchema = import_zod_openapi71.z.object({
+  id: import_zod_openapi71.z.string()
 });
-var InviteUsersRequestSchema = import_zod_openapi70.z.object({
-  emailList: import_zod_openapi70.z.array(import_zod_openapi70.z.string().email()).min(1),
-  sendEmail: import_zod_openapi70.z.boolean().optional().default(false)
+var InviteUsersRequestSchema = import_zod_openapi71.z.object({
+  emailList: import_zod_openapi71.z.array(import_zod_openapi71.z.string().email()).min(1),
+  sendEmail: import_zod_openapi71.z.boolean().optional().default(false)
 });
-var InvitedUserResultSchema = import_zod_openapi70.z.discriminatedUnion("status", [
-  import_zod_openapi70.z.object({
-    email: import_zod_openapi70.z.string(),
-    status: import_zod_openapi70.z.literal("created"),
-    userId: import_zod_openapi70.z.string()
+var InvitedUserResultSchema = import_zod_openapi71.z.discriminatedUnion("status", [
+  import_zod_openapi71.z.object({
+    email: import_zod_openapi71.z.string(),
+    status: import_zod_openapi71.z.literal("created"),
+    userId: import_zod_openapi71.z.string()
   }),
-  import_zod_openapi70.z.object({
-    email: import_zod_openapi70.z.string(),
-    status: import_zod_openapi70.z.literal("exists")
+  import_zod_openapi71.z.object({
+    email: import_zod_openapi71.z.string(),
+    status: import_zod_openapi71.z.literal("exists")
   }),
-  import_zod_openapi70.z.object({
-    email: import_zod_openapi70.z.string(),
-    status: import_zod_openapi70.z.literal("failed")
+  import_zod_openapi71.z.object({
+    email: import_zod_openapi71.z.string(),
+    status: import_zod_openapi71.z.literal("failed")
   })
 ]);
-var InviteUsersResponseSchema = import_zod_openapi70.z.object({
-  results: import_zod_openapi70.z.array(InvitedUserResultSchema)
+var InviteUsersResponseSchema = import_zod_openapi71.z.object({
+  results: import_zod_openapi71.z.array(InvitedUserResultSchema)
 });
-var EditAdminUserRequestSchema = import_zod_openapi70.z.object({
-  name: import_zod_openapi70.z.string().min(1),
-  email: import_zod_openapi70.z.string().email()
+var EditAdminUserRequestSchema = import_zod_openapi71.z.object({
+  name: import_zod_openapi71.z.string().min(1),
+  email: import_zod_openapi71.z.string().email()
 });
-var AdminUserMutationResponseSchema = import_zod_openapi70.z.object({
+var AdminUserMutationResponseSchema = import_zod_openapi71.z.object({
   user: UserPublicSchema
 });
-var ResetPasswordResponseSchema = import_zod_openapi70.z.object({
+var ResetPasswordResponseSchema = import_zod_openapi71.z.object({
   user: UserPublicSchema,
-  newPassword: import_zod_openapi70.z.string()
+  newPassword: import_zod_openapi71.z.string()
 });
-var UpdateAdminUserEmailRequestSchema = import_zod_openapi70.z.object({
-  email: import_zod_openapi70.z.string().email()
+var UpdateAdminUserEmailRequestSchema = import_zod_openapi71.z.object({
+  email: import_zod_openapi71.z.string().email()
 });
-var DeleteAdminUserResponseSchema = import_zod_openapi70.z.object({
-  deletedId: import_zod_openapi70.z.string()
+var DeleteAdminUserResponseSchema = import_zod_openapi71.z.object({
+  deletedId: import_zod_openapi71.z.string()
 });
-var PendingUsersCountResponseSchema = import_zod_openapi70.z.object({
-  count: import_zod_openapi70.z.number().int().nonnegative()
+var PendingUsersCountResponseSchema = import_zod_openapi71.z.object({
+  count: import_zod_openapi71.z.number().int().nonnegative()
 });
 
 // src/contracts/admin/users.ts
-var listUsersRoute = (0, import_zod_openapi71.createRoute)({
+var listUsersRoute = (0, import_zod_openapi72.createRoute)({
   method: "get",
   path: "/admin/users",
   tags: ["admin.users"],
@@ -5906,7 +6014,7 @@ var listUsersRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var searchUsersByEmailRoute = (0, import_zod_openapi71.createRoute)({
+var searchUsersByEmailRoute = (0, import_zod_openapi72.createRoute)({
   method: "get",
   path: "/admin/users/search",
   tags: ["admin.users"],
@@ -5934,7 +6042,7 @@ var searchUsersByEmailRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var inviteUsersRoute = (0, import_zod_openapi71.createRoute)({
+var inviteUsersRoute = (0, import_zod_openapi72.createRoute)({
   method: "post",
   path: "/admin/users/invite",
   tags: ["admin.users"],
@@ -5968,7 +6076,7 @@ var inviteUsersRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var editUserRoute = (0, import_zod_openapi71.createRoute)({
+var editUserRoute = (0, import_zod_openapi72.createRoute)({
   method: "patch",
   path: "/admin/users/{id}",
   tags: ["admin.users"],
@@ -6011,7 +6119,7 @@ var editUserRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var makeAdminRoute = (0, import_zod_openapi71.createRoute)({
+var makeAdminRoute = (0, import_zod_openapi72.createRoute)({
   method: "put",
   path: "/admin/users/{id}/admin",
   tags: ["admin.users"],
@@ -6047,7 +6155,7 @@ var makeAdminRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var removeFromAdminRoute = (0, import_zod_openapi71.createRoute)({
+var removeFromAdminRoute = (0, import_zod_openapi72.createRoute)({
   method: "delete",
   path: "/admin/users/{id}/admin",
   tags: ["admin.users"],
@@ -6083,7 +6191,7 @@ var removeFromAdminRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var activateUserRoute = (0, import_zod_openapi71.createRoute)({
+var activateUserRoute = (0, import_zod_openapi72.createRoute)({
   method: "put",
   path: "/admin/users/{id}/status/active",
   tags: ["admin.users"],
@@ -6119,7 +6227,7 @@ var activateUserRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var suspendUserRoute = (0, import_zod_openapi71.createRoute)({
+var suspendUserRoute = (0, import_zod_openapi72.createRoute)({
   method: "put",
   path: "/admin/users/{id}/status/suspended",
   tags: ["admin.users"],
@@ -6155,7 +6263,7 @@ var suspendUserRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var resetPasswordRoute = (0, import_zod_openapi71.createRoute)({
+var resetPasswordRoute = (0, import_zod_openapi72.createRoute)({
   method: "post",
   path: "/admin/users/{id}/reset-password",
   tags: ["admin.users"],
@@ -6191,7 +6299,7 @@ var resetPasswordRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var resendInviteRoute = (0, import_zod_openapi71.createRoute)({
+var resendInviteRoute = (0, import_zod_openapi72.createRoute)({
   method: "post",
   path: "/admin/users/{id}/resend-invite",
   tags: ["admin.users"],
@@ -6231,7 +6339,7 @@ var resendInviteRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var updateUserEmailRoute = (0, import_zod_openapi71.createRoute)({
+var updateUserEmailRoute = (0, import_zod_openapi72.createRoute)({
   method: "put",
   path: "/admin/users/{id}/email",
   tags: ["admin.users"],
@@ -6274,7 +6382,7 @@ var updateUserEmailRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var pendingUsersCountRoute = (0, import_zod_openapi71.createRoute)({
+var pendingUsersCountRoute = (0, import_zod_openapi72.createRoute)({
   method: "get",
   path: "/admin/users/pending-count",
   tags: ["admin.users"],
@@ -6299,7 +6407,7 @@ var pendingUsersCountRoute = (0, import_zod_openapi71.createRoute)({
     }
   }
 });
-var deleteUserRoute = (0, import_zod_openapi71.createRoute)({
+var deleteUserRoute = (0, import_zod_openapi72.createRoute)({
   method: "delete",
   path: "/admin/users/{id}",
   tags: ["admin.users"],
@@ -6356,7 +6464,7 @@ var adminUsersRoutes = {
 };
 
 // src/client.ts
-var import_zod_openapi72 = require("@hono/zod-openapi");
+var import_zod_openapi73 = require("@hono/zod-openapi");
 var import_client = require("hono/client");
 var stubUser = {
   id: "",
@@ -6615,7 +6723,7 @@ var stubListPlugins = { plugins: [] };
 var stubPluginConfig = { name: "", fields: [], values: {} };
 var stubUpdatePluginConfig = { ok: true, hotReloaded: false, reconfigureFailed: false };
 var stubClearRenderCache = { ok: true, clearedAt: "", removedCount: 0 };
-var appAuthMeUserChain = new import_zod_openapi72.OpenAPIHono().openapi(
+var appAuthMeUserChain = new import_zod_openapi73.OpenAPIHono().openapi(
   appRoutes.getAppInfoRoute,
   (c) => c.json({ title: null, confidential: null, version: "", apiVersion: "v2", capabilities: [], canSelfRegister: true }, 200)
 ).openapi(installerRoutes.getInstallerStatusRoute, (c) => c.json({ status: "installer_required" }, 200)).openapi(installerRoutes.createAdminRoute, (c) => c.json({ status: "ok" }, 200)).openapi(tokenAuthRoutes.tokenLoginRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenRegisterRoute, (c) => c.json({ status: "confirmation_required" }, 200)).openapi(inviteAcceptRoutes.invitePreviewRoute, (c) => c.json({ email: "stub@example.com" }, 200)).openapi(inviteAcceptRoutes.acceptInviteRoute, (c) => c.json(stubTokens, 200)).openapi(passwordResetRoutes.forgotPasswordRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.validateResetTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(passwordResetRoutes.selfResetPasswordRoute, (c) => c.json(stubTokens, 200)).openapi(activationRoutes.validateActivationTokenRoute, (c) => c.json({ ok: true }, 200)).openapi(activationRoutes.activateAccountRoute, (c) => c.json(stubTokens, 200)).openapi(emailChangeRoutes.validateEmailChangeTokenRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(emailChangeRoutes.confirmEmailChangeRoute, (c) => c.json({ ok: true, email: "stub@example.com" }, 200)).openapi(tokenAuthRoutes.tokenRefreshRoute, (c) => c.json(stubTokens, 200)).openapi(tokenAuthRoutes.tokenLogoutRoute, (c) => c.json({ message: "" }, 200)).openapi(
@@ -6635,54 +6743,38 @@ var appAuthMeUserChain = new import_zod_openapi72.OpenAPIHono().openapi(
     200
   )
 ).openapi(meRoutes.getProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateThemeRoute, (c) => c.json({ status: "ok", theme: "system" }, 200)).openapi(meRoutes.uploadPictureRoute, (c) => c.json({ status: true }, 200)).openapi(meRoutes.deletePictureRoute, (c) => c.json({ status: "ok" }, 200)).openapi(meRoutes.updatePasswordRoute, (c) => c.json({ status: "ok", message: "" }, 200)).openapi(meRoutes.recentlyViewedPagesRoute, (c) => c.json({ pages: [] }, 200)).openapi(accessTokenRoutes.listAccessTokensRoute, (c) => c.json({ accessTokens: [] }, 200)).openapi(accessTokenRoutes.createAccessTokenRoute, (c) => c.json(stubCreateAccessToken, 201)).openapi(accessTokenRoutes.deleteAccessTokenRoute, (c) => c.json(stubAccessToken, 200)).openapi(userRoutes.getUserPageRoute, (c) => c.json(stubUserPage, 200)).openapi(userRoutes.getUserBookmarksRoute, (c) => c.json(stubUserBookmarks, 200)).openapi(userRoutes.getUserPagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.listMembersRoute, (c) => c.json(stubListUsers, 200));
-var bookmarkBacklinkCommentRevisionChain = new import_zod_openapi72.OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
-var pageChain = new import_zod_openapi72.OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
-var lateContractApp = new import_zod_openapi72.OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
-var adminSettingsContractApp = new import_zod_openapi72.OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
-var adminUsersPluginsContractApp = new import_zod_openapi72.OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
-var oauthContractApp = new import_zod_openapi72.OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200));
+var bookmarkBacklinkCommentRevisionChain = new import_zod_openapi73.OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
+var pageChain = new import_zod_openapi73.OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.claimPageLinkAccessRoute, (c) => c.json({ ...stubPageWithRevision, granted: false }, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
+var lateContractApp = new import_zod_openapi73.OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
+var adminSettingsContractApp = new import_zod_openapi73.OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
+var adminUsersPluginsContractApp = new import_zod_openapi73.OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
+var oauthContractApp = new import_zod_openapi73.OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200));
 var createClient = (baseUrl, options = {}) => (0, import_client.hc)(baseUrl, {
   headers: options.headers,
   fetch: options.fetch
 });
 
-// src/schemas/app-capabilities.ts
-var STATIC_CAPABILITIES = [
-  "oauth",
-  // The oauth:* tags mirror GRANT_TYPES_SUPPORTED + the S256 PKCE method
-  // (schemas/oauth-endpoints.ts / the RFC 8414 discovery doc). Keep in sync.
-  "oauth:auth-code",
-  "oauth:device",
-  "oauth:pkce",
-  "pat",
-  "pages",
-  "comments",
-  "bookmarks",
-  "attachments",
-  "notifications"
-];
-var API_SURFACE_VERSION = "v2";
-
 // src/schemas/mail-token.ts
-var import_zod_openapi73 = require("@hono/zod-openapi");
-var MailTokenPurposeSchema = import_zod_openapi73.z.enum(["invite", "activate", "reset", "email-change"]);
-var MailTokenPayloadSchema = import_zod_openapi73.z.object({
+var import_zod_openapi74 = require("@hono/zod-openapi");
+var MailTokenPurposeSchema = import_zod_openapi74.z.enum(["invite", "activate", "reset", "email-change"]);
+var MailTokenPayloadSchema = import_zod_openapi74.z.object({
   purpose: MailTokenPurposeSchema,
-  userId: import_zod_openapi73.z.string(),
+  userId: import_zod_openapi74.z.string(),
   /** Target address. For `email-change` this is the NEW address. */
-  email: import_zod_openapi73.z.string().email(),
+  email: import_zod_openapi74.z.string().email(),
   /**
    * For `email-change`: the account's email at issue time. The confirm
    * endpoint rejects the token unless it still matches, making the token
    * single-use (a stale token cannot revert a later change).
    */
-  fromEmail: import_zod_openapi73.z.string().email().optional(),
+  fromEmail: import_zod_openapi74.z.string().email().optional(),
   // iat / exp are injected and verified by the JWT layer.
-  iat: import_zod_openapi73.z.number().optional(),
-  exp: import_zod_openapi73.z.number().optional()
+  iat: import_zod_openapi74.z.number().optional(),
+  exp: import_zod_openapi74.z.number().optional()
 });
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ALL_CAPABILITIES,
   ALL_SCOPES,
   API_SURFACE_VERSION,
   AccessTokenSchema,
@@ -6721,6 +6813,8 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   BacklinkSchema,
   BookmarkResponseSchema,
   BookmarkSchema,
+  CapabilitySchema,
+  ClaimPageLinkAccessResponseSchema,
   ClearRenderCacheResponseSchema,
   CollabForceReloadMessageSchema,
   CollabSaveErrorSchema,
@@ -6744,6 +6838,7 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   DEVICE_CODE_GRANT_TYPE,
   DISCOVERY_SCOPES_SUPPORTED,
   DND_EXTRA_UPLOAD_MIME,
+  DYNAMIC_CAPABILITIES,
   DeleteAdminUserResponseSchema,
   DeleteCommentRequestSchema,
   DeleteCommentResponseSchema,
@@ -6997,6 +7092,7 @@ var MailTokenPayloadSchema = import_zod_openapi73.z.object({
   backlinkRoutes,
   bookmarkRoutes,
   cancelDraftRoute,
+  claimPageLinkAccessRoute,
   clearRenderCacheAllRoute,
   clearRenderCachePluginRoute,
   commentRoutes,