@crowi/api-contract 2.0.0-alpha.6 → 2.0.0-alpha.7

package/dist/index.mjs

@@ -294,14 +294,37 @@ var ForbiddenErrorSchema = ApiErrorSchema.extend({
 });
 
 // src/schemas/app.ts
+import { z as z4 } from "@hono/zod-openapi";
+
+// src/schemas/app-capabilities.ts
 import { z as z3 } from "@hono/zod-openapi";
-var AppInfoResponseSchema = z3.object({
-  title: z3.string().nullable(),
-  confidential: z3.string().nullable(),
-  version: z3.string(),
-  apiVersion: z3.string(),
-  capabilities: z3.array(z3.string()),
-  canSelfRegister: z3.boolean()
+var STATIC_CAPABILITIES = [
+  "oauth",
+  // The oauth:* tags mirror GRANT_TYPES_SUPPORTED + the S256 PKCE method
+  // (schemas/oauth-endpoints.ts / the RFC 8414 discovery doc). Keep in sync.
+  "oauth:auth-code",
+  "oauth:device",
+  "oauth:pkce",
+  "pat",
+  "pages",
+  "comments",
+  "bookmarks",
+  "attachments",
+  "notifications"
+];
+var DYNAMIC_CAPABILITIES = ["search", "collab", "collab:redis"];
+var ALL_CAPABILITIES = [...STATIC_CAPABILITIES, ...DYNAMIC_CAPABILITIES];
+var CapabilitySchema = z3.enum(ALL_CAPABILITIES).openapi("Capability");
+var API_SURFACE_VERSION = "v2";
+
+// src/schemas/app.ts
+var AppInfoResponseSchema = z4.object({
+  title: z4.string().nullable(),
+  confidential: z4.string().nullable(),
+  version: z4.string(),
+  apiVersion: z4.string(),
+  capabilities: z4.array(CapabilitySchema),
+  canSelfRegister: z4.boolean()
 });
 
 // src/contracts/app.ts
@@ -335,22 +358,22 @@ var appRoutes = { getAppInfoRoute };
 import { createRoute as createRoute2 } from "@hono/zod-openapi";
 
 // src/schemas/installer.ts
-import { z as z4 } from "@hono/zod-openapi";
-var InstallerStatusResponseSchema = z4.object({
-  status: z4.enum(["installer_required", "already_installed"])
-});
-var CreateAdminRequestSchema = z4.object({
-  registerForm: z4.object({
-    username: z4.string().min(1).regex(/^[\da-zA-Z\-_.]+$/, "username may only contain letters, digits, hyphens, underscores, and dots"),
-    name: z4.string().min(1),
-    email: z4.string().email(),
-    password: z4.string().min(6).regex(/^[\x20-\x7F]{6,}$/, "password must be 6+ printable ASCII characters")
+import { z as z5 } from "@hono/zod-openapi";
+var InstallerStatusResponseSchema = z5.object({
+  status: z5.enum(["installer_required", "already_installed"])
+});
+var CreateAdminRequestSchema = z5.object({
+  registerForm: z5.object({
+    username: z5.string().min(1).regex(/^[\da-zA-Z\-_.]+$/, "username may only contain letters, digits, hyphens, underscores, and dots"),
+    name: z5.string().min(1),
+    email: z5.string().email(),
+    password: z5.string().min(6).regex(/^[\x20-\x7F]{6,}$/, "password must be 6+ printable ASCII characters")
   })
 });
-var CreateAdminResponseSchema = z4.object({
-  status: z4.enum(["ok", "error"]),
-  message: z4.string().optional(),
-  errors: z4.array(z4.string()).optional()
+var CreateAdminResponseSchema = z5.object({
+  status: z5.enum(["ok", "error"]),
+  message: z5.string().optional(),
+  errors: z5.array(z5.string()).optional()
 });
 
 // src/contracts/installer.ts
@@ -422,53 +445,53 @@ var createAdminRoute = createRoute2({
 var installerRoutes = { getInstallerStatusRoute, createAdminRoute };
 
 // src/contracts/tokenAuth.ts
-import { createRoute as createRoute3, z as z6 } from "@hono/zod-openapi";
+import { createRoute as createRoute3, z as z7 } from "@hono/zod-openapi";
 
 // src/schemas/auth.ts
-import { z as z5 } from "@hono/zod-openapi";
-var TokenAuthLoginRequestSchema = z5.object({
-  email: z5.string().email(),
-  password: z5.string().min(6)
-});
-var TokenAuthResponseSchema = z5.object({
-  accessToken: z5.string(),
-  refreshToken: z5.string(),
-  expiresIn: z5.number(),
+import { z as z6 } from "@hono/zod-openapi";
+var TokenAuthLoginRequestSchema = z6.object({
+  email: z6.string().email(),
+  password: z6.string().min(6)
+});
+var TokenAuthResponseSchema = z6.object({
+  accessToken: z6.string(),
+  refreshToken: z6.string(),
+  expiresIn: z6.number(),
   // seconds until expiration
-  user: z5.object({
-    id: z5.string(),
-    username: z5.string(),
-    email: z5.string().email(),
-    name: z5.string(),
-    image: z5.string().optional(),
-    admin: z5.boolean().optional()
+  user: z6.object({
+    id: z6.string(),
+    username: z6.string(),
+    email: z6.string().email(),
+    name: z6.string(),
+    image: z6.string().optional(),
+    admin: z6.boolean().optional()
   })
 });
-var RefreshTokenRequestSchema = z5.object({
-  refreshToken: z5.string()
+var RefreshTokenRequestSchema = z6.object({
+  refreshToken: z6.string()
 });
-var TokenAuthRegisterRequestSchema = z5.object({
-  username: z5.string(),
-  name: z5.string(),
-  email: z5.string().email(),
-  password: z5.string().min(6)
+var TokenAuthRegisterRequestSchema = z6.object({
+  username: z6.string(),
+  name: z6.string(),
+  email: z6.string().email(),
+  password: z6.string().min(6)
 });
-var RegisterPendingResponseSchema = z5.object({
-  status: z5.enum(["confirmation_required", "approval_required"])
+var RegisterPendingResponseSchema = z6.object({
+  status: z6.enum(["confirmation_required", "approval_required"])
 });
 
 // src/contracts/tokenAuth.ts
-var TokenLogoutResponseSchema = z6.object({ message: z6.string() });
-var TokenMeResponseSchema = z6.object({
-  user: z6.object({
-    id: z6.string(),
-    username: z6.string(),
-    email: z6.string().email(),
-    name: z6.string(),
-    image: z6.string().optional(),
-    status: z6.number(),
-    admin: z6.boolean().optional(),
-    createdAt: z6.string()
+var TokenLogoutResponseSchema = z7.object({ message: z7.string() });
+var TokenMeResponseSchema = z7.object({
+  user: z7.object({
+    id: z7.string(),
+    username: z7.string(),
+    email: z7.string().email(),
+    name: z7.string(),
+    image: z7.string().optional(),
+    status: z7.number(),
+    admin: z7.boolean().optional(),
+    createdAt: z7.string()
   })
 });
 var tokenLoginRoute = createRoute3({
@@ -596,7 +619,7 @@ var tokenLogoutRoute = createRoute3({
     body: {
       content: {
         "application/json": {
-          schema: z6.object({ refreshToken: z6.string().optional() })
+          schema: z7.object({ refreshToken: z7.string().optional() })
         }
       }
     }
@@ -649,15 +672,15 @@ var tokenAuthRoutes = {
 import { createRoute as createRoute4 } from "@hono/zod-openapi";
 
 // src/schemas/inviteAccept.ts
-import { z as z7 } from "@hono/zod-openapi";
-var InviteAcceptRequestSchema = z7.object({
-  token: z7.string(),
-  username: z7.string().min(1),
-  name: z7.string().min(1),
-  password: z7.string().min(6)
+import { z as z8 } from "@hono/zod-openapi";
+var InviteAcceptRequestSchema = z8.object({
+  token: z8.string(),
+  username: z8.string().min(1),
+  name: z8.string().min(1),
+  password: z8.string().min(6)
 });
-var InvitePreviewResponseSchema = z7.object({
-  email: z7.string().email()
+var InvitePreviewResponseSchema = z8.object({
+  email: z8.string().email()
 });
 
 // src/contracts/inviteAccept.ts
@@ -734,16 +757,16 @@ var inviteAcceptRoutes = {
 import { createRoute as createRoute5 } from "@hono/zod-openapi";
 
 // src/schemas/passwordReset.ts
-import { z as z8 } from "@hono/zod-openapi";
-var ForgotPasswordRequestSchema = z8.object({
-  email: z8.string().email()
+import { z as z9 } from "@hono/zod-openapi";
+var ForgotPasswordRequestSchema = z9.object({
+  email: z9.string().email()
 });
-var ForgotPasswordResponseSchema = z8.object({
-  ok: z8.literal(true)
+var ForgotPasswordResponseSchema = z9.object({
+  ok: z9.literal(true)
 });
-var ResetPasswordRequestSchema = z8.object({
-  token: z8.string(),
-  password: z8.string().min(6)
+var ResetPasswordRequestSchema = z9.object({
+  token: z9.string(),
+  password: z9.string().min(6)
 });
 
 // src/contracts/passwordReset.ts
@@ -838,12 +861,12 @@ var passwordResetRoutes = {
 import { createRoute as createRoute6 } from "@hono/zod-openapi";
 
 // src/schemas/activation.ts
-import { z as z9 } from "@hono/zod-openapi";
-var ActivateRequestSchema = z9.object({
-  token: z9.string()
+import { z as z10 } from "@hono/zod-openapi";
+var ActivateRequestSchema = z10.object({
+  token: z10.string()
 });
-var ActivateValidationResponseSchema = z9.object({
-  ok: z9.literal(true)
+var ActivateValidationResponseSchema = z10.object({
+  ok: z10.literal(true)
 });
 
 // src/contracts/activation.ts
@@ -908,14 +931,14 @@ var activationRoutes = {
 import { createRoute as createRoute7 } from "@hono/zod-openapi";
 
 // src/schemas/emailChange.ts
-import { z as z10 } from "@hono/zod-openapi";
-var ConfirmEmailChangeRequestSchema = z10.object({
-  token: z10.string()
+import { z as z11 } from "@hono/zod-openapi";
+var ConfirmEmailChangeRequestSchema = z11.object({
+  token: z11.string()
 });
-var ConfirmEmailChangeResponseSchema = z10.object({
-  ok: z10.literal(true),
+var ConfirmEmailChangeResponseSchema = z11.object({
+  ok: z11.literal(true),
   /** The newly-confirmed email address. */
-  email: z10.string().email()
+  email: z11.string().email()
 });
 
 // src/contracts/emailChange.ts
@@ -981,19 +1004,19 @@ var emailChangeRoutes = {
 };
 
 // src/contracts/me.ts
-import { createRoute as createRoute8, z as z15 } from "@hono/zod-openapi";
+import { createRoute as createRoute8, z as z16 } from "@hono/zod-openapi";
 
 // src/schemas/me.ts
-import { z as z14 } from "@hono/zod-openapi";
+import { z as z15 } from "@hono/zod-openapi";
 
 // src/schemas/page.ts
-import { z as z13 } from "@hono/zod-openapi";
+import { z as z14 } from "@hono/zod-openapi";
 
 // src/schemas/collab.ts
-import { z as z12 } from "@hono/zod-openapi";
+import { z as z13 } from "@hono/zod-openapi";
 
 // src/schemas/userPublic.ts
-import { z as z11 } from "@hono/zod-openapi";
+import { z as z12 } from "@hono/zod-openapi";
 var UserPublicStatus = {
   REGISTERED: 1,
   ACTIVE: 2,
@@ -1001,64 +1024,64 @@ var UserPublicStatus = {
   DELETED: 4,
   INVITED: 5
 };
-var UserPublicStatusSchema = z11.nativeEnum(UserPublicStatus);
-var UserPublicSchema = z11.object({
-  _id: z11.string(),
-  id: z11.string().optional(),
+var UserPublicStatusSchema = z12.nativeEnum(UserPublicStatus);
+var UserPublicSchema = z12.object({
+  _id: z12.string(),
+  id: z12.string().optional(),
   // for compatibility (virtual field)
-  username: z11.string(),
-  name: z11.string(),
-  email: z11.string().email(),
-  image: z11.string().nullable().optional(),
-  introduction: z11.string().optional(),
-  createdAt: z11.string(),
-  admin: z11.boolean().optional(),
+  username: z12.string(),
+  name: z12.string(),
+  email: z12.string().email(),
+  image: z12.string().nullable().optional(),
+  introduction: z12.string().optional(),
+  createdAt: z12.string(),
+  admin: z12.boolean().optional(),
   status: UserPublicStatusSchema.optional()
 });
 
 // src/schemas/collab.ts
 var ContributorRefSchema = UserPublicSchema;
-var RevisionTypeSchema = z12.enum(["snapshot", "incremental"]);
-var WsTokenResponseSchema = z12.object({
-  wsToken: z12.string(),
-  pageId: z12.string(),
-  expiresAt: z12.string(),
-  readonly: z12.boolean()
-});
-var WsTokenPayloadSchema = z12.object({
-  userId: z12.string(),
-  pageId: z12.string(),
-  readonly: z12.boolean(),
-  iat: z12.number().int(),
-  exp: z12.number().int()
-});
-var CollabSaveMessageSchema = z12.object({
-  kind: z12.literal("crowi:save"),
-  message: z12.string().optional()
-});
-var CollabSaveOkSchema = z12.object({
-  kind: z12.literal("crowi:save-ok"),
-  revisionId: z12.string()
-});
-var CollabSaveErrorSchema = z12.object({
-  kind: z12.literal("crowi:save-error"),
-  code: z12.string(),
-  message: z12.string()
-});
-var CollabForceReloadMessageSchema = z12.object({
-  kind: z12.literal("crowi:force-reload"),
-  reason: z12.string().optional()
+var RevisionTypeSchema = z13.enum(["snapshot", "incremental"]);
+var WsTokenResponseSchema = z13.object({
+  wsToken: z13.string(),
+  pageId: z13.string(),
+  expiresAt: z13.string(),
+  readonly: z13.boolean()
+});
+var WsTokenPayloadSchema = z13.object({
+  userId: z13.string(),
+  pageId: z13.string(),
+  readonly: z13.boolean(),
+  iat: z13.number().int(),
+  exp: z13.number().int()
+});
+var CollabSaveMessageSchema = z13.object({
+  kind: z13.literal("crowi:save"),
+  message: z13.string().optional()
+});
+var CollabSaveOkSchema = z13.object({
+  kind: z13.literal("crowi:save-ok"),
+  revisionId: z13.string()
+});
+var CollabSaveErrorSchema = z13.object({
+  kind: z13.literal("crowi:save-error"),
+  code: z13.string(),
+  message: z13.string()
+});
+var CollabForceReloadMessageSchema = z13.object({
+  kind: z13.literal("crowi:force-reload"),
+  reason: z13.string().optional()
 });
 
 // src/schemas/page.ts
-var PageGrantSchema = z13.enum(["1", "2", "3", "4"]).transform((val) => Number(val));
+var PageGrantSchema = z14.enum(["1", "2", "3", "4"]).transform((val) => Number(val));
 var PageGrantEnum = {
   PUBLIC: 1,
   RESTRICTED: 2,
   SPECIFIED: 3,
   OWNER: 4
 };
-var PageStatusSchema = z13.enum(["wip", "published", "deleted", "deprecated", "draft"]);
+var PageStatusSchema = z14.enum(["wip", "published", "deleted", "deprecated", "draft"]);
 var PageStatusEnum = {
   WIP: "wip",
   PUBLISHED: "published",
@@ -1066,51 +1089,51 @@ var PageStatusEnum = {
   DEPRECATED: "deprecated",
   DRAFT: "draft"
 };
-var PageTypeSchema = z13.enum(["portal", "user", "public"]);
+var PageTypeSchema = z14.enum(["portal", "user", "public"]);
 var PageTypeEnum = {
   PORTAL: "portal",
   USER: "user",
   PUBLIC: "public"
 };
-var PageUserSchema = z13.object({
-  _id: z13.string(),
-  id: z13.string().optional(),
+var PageUserSchema = z14.object({
+  _id: z14.string(),
+  id: z14.string().optional(),
   // for compatibility
-  username: z13.string(),
-  name: z13.string(),
-  email: z13.string().email(),
-  image: z13.string().nullable().optional(),
-  createdAt: z13.string()
-});
-var TocEntrySchema = z13.object({
-  level: z13.number().int().min(1).max(6),
-  text: z13.string(),
-  anchorId: z13.string()
-});
-var WikiLinkSchema = z13.object({
+  username: z14.string(),
+  name: z14.string(),
+  email: z14.string().email(),
+  image: z14.string().nullable().optional(),
+  createdAt: z14.string()
+});
+var TocEntrySchema = z14.object({
+  level: z14.number().int().min(1).max(6),
+  text: z14.string(),
+  anchorId: z14.string()
+});
+var WikiLinkSchema = z14.object({
   /** Verbatim source between the `[[` `]]` (no surrounding brackets). */
-  raw: z13.string(),
+  raw: z14.string(),
   /** Normalised target (left of the `|`, fragment trimmed for resolution). */
-  target: z13.string(),
+  target: z14.string(),
   /** Optional pipe-aliased display text (right of the `|`). */
-  displayText: z13.string().optional()
-});
-var MentionSchema = z13.object({
-  username: z13.string()
-});
-var RevisionMetaSchemaShape = z13.object({
-  toc: z13.array(TocEntrySchema).optional(),
-  wikiLinks: z13.array(WikiLinkSchema).optional(),
-  mentions: z13.array(MentionSchema).optional(),
-  codeBlockLanguages: z13.array(z13.string()).optional()
-});
-var RevisionSchema = z13.object({
-  _id: z13.string(),
-  path: z13.string(),
-  body: z13.string(),
-  format: z13.string().default("markdown"),
+  displayText: z14.string().optional()
+});
+var MentionSchema = z14.object({
+  username: z14.string()
+});
+var RevisionMetaSchemaShape = z14.object({
+  toc: z14.array(TocEntrySchema).optional(),
+  wikiLinks: z14.array(WikiLinkSchema).optional(),
+  mentions: z14.array(MentionSchema).optional(),
+  codeBlockLanguages: z14.array(z14.string()).optional()
+});
+var RevisionSchema = z14.object({
+  _id: z14.string(),
+  path: z14.string(),
+  body: z14.string(),
+  format: z14.string().default("markdown"),
   author: PageUserSchema.nullable().optional(),
-  createdAt: z13.string(),
+  createdAt: z14.string(),
   meta: RevisionMetaSchemaShape.optional(),
   // RFC-0002 Phase 3: transformed mdast (parse + core plugins +
   // shiki) for the web client to render without re-parsing the body.
@@ -1118,42 +1141,42 @@ var RevisionSchema = z13.object({
   // spec to maintain a strict Zod schema for. Only single-page detail
   // (`getPage`) and single-revision detail (`getRevision`) emit it;
   // list endpoints skip it for payload weight.
-  renderedAst: z13.unknown().optional(),
+  renderedAst: z14.unknown().optional(),
   // RFC-0002 round 3.1: semver of the renderer pipeline that produced
   // `renderedAst`. The read path uses this to detect stale entries
   // (rebuilt by `renderer:rebuild` once RFC-0008 lands). Absent on
   // revisions saved before this field was introduced.
-  rendererVersion: z13.string().optional(),
+  rendererVersion: z14.string().optional(),
   // RFC-0003 collaborative-save fields. All optional; v1.x revisions
   // emit none of them. See `packages/api/src/models/revision.ts` for
   // semantics. The list-page endpoint currently does not surface
   // these — they only appear on the Phase 5+ checkpoint Revisions
   // produced by Hocuspocus and on the single-revision detail route.
-  parentRevisionId: z13.string().nullable().optional(),
+  parentRevisionId: z14.string().nullable().optional(),
   type: RevisionTypeSchema.optional(),
-  savedBy: z13.union([z13.string(), PageUserSchema]).nullable().optional(),
-  contributors: z13.array(z13.union([z13.string(), PageUserSchema])).optional(),
-  message: z13.string().optional(),
+  savedBy: z14.union([z14.string(), PageUserSchema]).nullable().optional(),
+  contributors: z14.array(z14.union([z14.string(), PageUserSchema])).optional(),
+  message: z14.string().optional(),
   // RFC-0010 — edit channel ('web' | 'oauth' | 'pat'); absent on
   // pre-RFC-0010 / collaborative / browser revisions.
-  editVia: z13.enum(["web", "oauth", "pat"]).optional()
-});
-var PageExtendedSchema = z13.record(z13.string(), z13.any()).optional();
-var PageSchema = z13.object({
-  _id: z13.string(),
-  path: z13.string(),
-  revision: z13.union([z13.string(), RevisionSchema]).optional(),
-  redirectTo: z13.string().nullable().optional(),
+  editVia: z14.enum(["web", "oauth", "pat"]).optional()
+});
+var PageExtendedSchema = z14.record(z14.string(), z14.any()).optional();
+var PageSchema = z14.object({
+  _id: z14.string(),
+  path: z14.string(),
+  revision: z14.union([z14.string(), RevisionSchema]).optional(),
+  redirectTo: z14.string().nullable().optional(),
   status: PageStatusSchema.nullable().optional(),
-  grant: z13.number().optional(),
-  grantedUsers: z13.array(z13.string()).optional(),
-  creator: z13.union([z13.string(), PageUserSchema]).nullable().optional(),
-  lastUpdateUser: z13.union([z13.string(), PageUserSchema]).nullable().optional(),
-  liker: z13.array(z13.string()).optional(),
-  commentCount: z13.number().default(0),
+  grant: z14.number().optional(),
+  grantedUsers: z14.array(z14.string()).optional(),
+  creator: z14.union([z14.string(), PageUserSchema]).nullable().optional(),
+  lastUpdateUser: z14.union([z14.string(), PageUserSchema]).nullable().optional(),
+  liker: z14.array(z14.string()).optional(),
+  commentCount: z14.number().default(0),
   extended: PageExtendedSchema,
-  createdAt: z13.string(),
-  updatedAt: z13.string().optional(),
+  createdAt: z14.string(),
+  updatedAt: z14.string().optional(),
   // RFC-0003 collaborative-edit fields. All optional; `null` is the
   // "no live state yet" value. Existing read endpoints (list /
   // detail) do not currently emit these — the contract is widened
@@ -1161,31 +1184,32 @@ var PageSchema = z13.object({
   // bump. `yjsState` is intentionally omitted from the contract:
   // the binary blob lives only inside Hocuspocus and never crosses
   // the HTTP API.
-  currentRevision: z13.string().nullable().optional(),
-  yjsCheckpointAt: z13.string().nullable().optional(),
+  currentRevision: z14.string().nullable().optional(),
+  yjsCheckpointAt: z14.string().nullable().optional(),
   // dynamic fields
-  latestRevision: z13.string().optional(),
-  likerCount: z13.number().optional(),
-  seenUsersCount: z13.number().optional()
+  latestRevision: z14.string().optional(),
+  likerCount: z14.number().optional(),
+  seenUsersCount: z14.number().optional()
 });
 var PageWithRevisionSchema = PageSchema.extend({
   revision: RevisionSchema,
   creator: PageUserSchema.nullable().optional(),
   lastUpdateUser: PageUserSchema.nullable().optional()
 });
-var GetPageRequestSchema = z13.object({
-  path: z13.string().optional(),
-  page_id: z13.string().optional(),
-  revision_id: z13.string().optional()
+var GetPageRequestSchema = z14.object({
+  path: z14.string().optional(),
+  page_id: z14.string().optional(),
+  revision_id: z14.string().optional()
 });
-var GetPageResponseSchema = z13.object({
+var GetPageResponseSchema = z14.object({
   page: PageWithRevisionSchema
 });
-var ListPagesRequestSchema = z13.object({
-  path: z13.string().optional(),
-  user: z13.string().optional(),
-  limit: z13.coerce.number().optional().default(50),
-  offset: z13.coerce.number().optional().default(0),
+var ClaimPageLinkAccessResponseSchema = GetPageResponseSchema.extend({ granted: z14.boolean() });
+var ListPagesRequestSchema = z14.object({
+  path: z14.string().optional(),
+  user: z14.string().optional(),
+  limit: z14.coerce.number().optional().default(50),
+  offset: z14.coerce.number().optional().default(0),
   // NOT `z.coerce.boolean()`: that uses JS `Boolean(v)`, so the string
   // `"false"` (which is how the web client serialises `false` on the
   // query string) coerces to `true`. That silently flipped
@@ -1193,25 +1217,25 @@ var ListPagesRequestSchema = z13.object({
   // filter and leak other users' drafts. Parse the string explicitly so
   // only `"true"` / `true` is truthy; anything else (incl. `"false"`,
   // absent) is `false`.
-  include_deleted: z13.preprocess((v) => v === true || v === "true" || v === "1", z13.boolean()).optional().default(false),
+  include_deleted: z14.preprocess((v) => v === true || v === "true" || v === "1", z14.boolean()).optional().default(false),
   // Sort field + direction for the listing. Defaults preserve the legacy
   // "newest-updated first" order so existing callers are unaffected.
   // `path` sorts alphabetically by full page path (≈ name order).
-  sort: z13.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
-  order: z13.enum(["asc", "desc"]).optional().default("desc"),
+  sort: z14.enum(["updatedAt", "createdAt", "path"]).optional().default("updatedAt"),
+  order: z14.enum(["asc", "desc"]).optional().default("desc"),
   // When listing a portal path (`/foo/`), open the portal document at this
   // past revision so the catch-all can mirror `?revision_id=` on portals.
   // Only the `portalPage` is rewound — the child rows always reflect the
   // latest. Absent for normal listings.
-  revision_id: z13.string().optional()
+  revision_id: z14.string().optional()
 });
-var PagerSchema = z13.object({
-  prev: z13.number().nullable(),
-  next: z13.number().nullable(),
-  offset: z13.number()
+var PagerSchema = z14.object({
+  prev: z14.number().nullable(),
+  next: z14.number().nullable(),
+  offset: z14.number()
 });
-var ListPagesResponseSchema = z13.object({
-  pages: z13.array(PageSchema),
+var ListPagesResponseSchema = z14.object({
+  pages: z14.array(PageSchema),
   pager: PagerSchema,
   portalPage: PageSchema.nullable().optional(),
   // When listing a portal path (`/foo/`) that has NO portal document of
@@ -1223,204 +1247,204 @@ var ListPagesResponseSchema = z13.object({
   // listings.
   contentPage: PageSchema.nullable().optional()
 });
-var PageChildSegmentSchema = z13.object({
+var PageChildSegmentSchema = z14.object({
   // The bare segment name immediately under the queried path
   // (e.g. 'rfc' for /crowi/rfc/... when querying /crowi/).
-  segment: z13.string(),
+  segment: z14.string(),
   // Portal-style path for this segment (always trailing-slashed),
   // e.g. '/crowi/rfc/'. Drop the trailing slash for the page path when
   // the segment is a leaf page (see `isPage`).
-  path: z13.string(),
+  path: z14.string(),
   // True when a real page is saved at the segment path itself
   // (e.g. `/crowi/rfc`, no trailing slash) — i.e. the segment is a
   // navigable page, not only an inferred directory.
-  isPage: z13.boolean(),
+  isPage: z14.boolean(),
   // True when a real portal page is saved at `path` (→ compass icon).
-  hasPortal: z13.boolean(),
+  hasPortal: z14.boolean(),
   // Number of descendant content pages strictly under this segment
   // (excludes the segment's own page / portal docs). A rough "how much
   // lives here" hint; > 0 means the segment is an expandable directory.
-  count: z13.number()
+  count: z14.number()
 });
-var ListPageChildrenRequestSchema = z13.object({
+var ListPageChildrenRequestSchema = z14.object({
   // Portal path to list children of. Trailing slash optional — the
   // handler normalises it. '/' lists the top-level segments.
-  path: z13.string()
+  path: z14.string()
 });
-var ListPageChildrenResponseSchema = z13.object({
+var ListPageChildrenResponseSchema = z14.object({
   // Sorted alphabetically by segment.
-  children: z13.array(PageChildSegmentSchema)
-});
-var CreatePageRequestSchema = z13.object({
-  path: z13.string(),
-  body: z13.string(),
-  grant: z13.number().optional()
-});
-var UpdatePageRequestSchema = z13.object({
-  page_id: z13.string(),
-  body: z13.string(),
-  revision_id: z13.string().optional(),
-  grant: z13.number().optional()
-});
-var RevertToRevisionRequestSchema = z13.object({
-  page_id: z13.string(),
-  revision_id: z13.string()
-});
-var SetPageGrantRequestSchema = z13.object({
-  page_id: z13.string(),
-  grant: z13.number().int()
-});
-var RenamePageRequestSchema = z13.object({
-  page_id: z13.string(),
-  new_path: z13.string(),
-  revision_id: z13.string().optional(),
-  create_redirect: z13.boolean().optional(),
+  children: z14.array(PageChildSegmentSchema)
+});
+var CreatePageRequestSchema = z14.object({
+  path: z14.string(),
+  body: z14.string(),
+  grant: z14.number().optional()
+});
+var UpdatePageRequestSchema = z14.object({
+  page_id: z14.string(),
+  body: z14.string(),
+  revision_id: z14.string().optional(),
+  grant: z14.number().optional()
+});
+var RevertToRevisionRequestSchema = z14.object({
+  page_id: z14.string(),
+  revision_id: z14.string()
+});
+var SetPageGrantRequestSchema = z14.object({
+  page_id: z14.string(),
+  grant: z14.number().int()
+});
+var RenamePageRequestSchema = z14.object({
+  page_id: z14.string(),
+  new_path: z14.string(),
+  revision_id: z14.string().optional(),
+  create_redirect: z14.boolean().optional(),
   // When true, rename the page together with its whole (grant-visible)
   // descendant subtree (renameTree) instead of just the single page.
   // Defaults to false — the single-page rename behaviour.
-  include_descendants: z13.boolean().optional()
+  include_descendants: z14.boolean().optional()
 });
-var RenamePageResponseSchema = z13.object({
+var RenamePageResponseSchema = z14.object({
   page: PageSchema,
-  renamed_count: z13.number()
-});
-var RenameTreeErrorSchema = z13.object({
-  error: z13.object({
-    code: z13.literal("PAGE_RENAME_TREE_FAILED"),
-    message: z13.string(),
-    conflicts: z13.array(
-      z13.object({
-        path: z13.string(),
-        reasons: z13.array(z13.string())
+  renamed_count: z14.number()
+});
+var RenameTreeErrorSchema = z14.object({
+  error: z14.object({
+    code: z14.literal("PAGE_RENAME_TREE_FAILED"),
+    message: z14.string(),
+    conflicts: z14.array(
+      z14.object({
+        path: z14.string(),
+        reasons: z14.array(z14.string())
       })
     ),
     // True when the failure happened after some pages were already moved
     // (non-transactional best-effort). When omitted/false the failure was
     // detected up-front and nothing was moved.
-    partial: z13.boolean().optional()
+    partial: z14.boolean().optional()
   })
 });
-var RenameSubtreeRequestSchema = z13.object({
-  old_path: z13.string(),
-  new_path: z13.string(),
-  create_redirect: z13.boolean().optional()
+var RenameSubtreeRequestSchema = z14.object({
+  old_path: z14.string(),
+  new_path: z14.string(),
+  create_redirect: z14.boolean().optional()
 });
-var RenameSubtreeResponseSchema = z13.object({
-  renamed_count: z13.number()
+var RenameSubtreeResponseSchema = z14.object({
+  renamed_count: z14.number()
 });
-var PageNotFoundErrorSchema = z13.object({
-  error: z13.object({
-    code: z13.literal("PAGE_NOT_FOUND"),
-    message: z13.literal("Page not found")
+var PageNotFoundErrorSchema = z14.object({
+  error: z14.object({
+    code: z14.literal("PAGE_NOT_FOUND"),
+    message: z14.literal("Page not found")
   })
 });
-var PageNotGrantedErrorSchema = z13.object({
-  error: z13.object({
-    code: z13.literal("PAGE_NOT_GRANTED"),
-    message: z13.literal("Page is not granted for the user")
+var PageNotGrantedErrorSchema = z14.object({
+  error: z14.object({
+    code: z14.literal("PAGE_NOT_GRANTED"),
+    message: z14.literal("Page is not granted for the user")
   })
 });
-var PageRevisionErrorSchema = z13.object({
-  error: z13.object({
-    code: z13.literal("PAGE_REVISION_ERROR"),
-    message: z13.string()
+var PageRevisionErrorSchema = z14.object({
+  error: z14.object({
+    code: z14.literal("PAGE_REVISION_ERROR"),
+    message: z14.string()
   })
 });
-var SeenPageRequestSchema = z13.object({
-  page_id: z13.string()
+var SeenPageRequestSchema = z14.object({
+  page_id: z14.string()
 });
-var SeenUsersResponseSchema = z13.object({
-  seenUsers: z13.array(UserPublicSchema),
-  seenUsersCount: z13.number()
+var SeenUsersResponseSchema = z14.object({
+  seenUsers: z14.array(UserPublicSchema),
+  seenUsersCount: z14.number()
 });
-var GetSeenUsersRequestSchema = z13.object({
-  page_id: z13.string(),
+var GetSeenUsersRequestSchema = z14.object({
+  page_id: z14.string(),
   // Optional cap on returned `seenUsers`. `seenUsersCount` always reflects
   // the full count regardless of `limit`. Omit for the full list.
-  limit: z13.coerce.number().int().positive().optional()
+  limit: z14.coerce.number().int().positive().optional()
 });
-var GetWatchStatusRequestSchema = z13.object({
-  page_id: z13.string()
+var GetWatchStatusRequestSchema = z14.object({
+  page_id: z14.string()
 });
-var WatchStatusResponseSchema = z13.object({
-  watching: z13.boolean()
+var WatchStatusResponseSchema = z14.object({
+  watching: z14.boolean()
 });
-var SetWatchStatusRequestSchema = z13.object({
-  page_id: z13.string(),
-  watching: z13.boolean()
+var SetWatchStatusRequestSchema = z14.object({
+  page_id: z14.string(),
+  watching: z14.boolean()
 });
 
 // src/schemas/me.ts
-var LanguageSchema = z14.enum(["en", "ja"]);
-var ThemeSchema = z14.enum(["system", "light", "dark"]);
-var UserProfileResponseSchema = z14.object({
-  id: z14.string(),
-  username: z14.string(),
-  name: z14.string(),
-  email: z14.string().email(),
+var LanguageSchema = z15.enum(["en", "ja"]);
+var ThemeSchema = z15.enum(["system", "light", "dark"]);
+var UserProfileResponseSchema = z15.object({
+  id: z15.string(),
+  username: z15.string(),
+  name: z15.string(),
+  email: z15.string().email(),
   lang: LanguageSchema,
   theme: ThemeSchema,
-  image: z14.string().nullable(),
-  introduction: z14.string().optional(),
-  hasPassword: z14.boolean(),
-  createdAt: z14.string(),
+  image: z15.string().nullable(),
+  introduction: z15.string().optional(),
+  hasPassword: z15.boolean(),
+  createdAt: z15.string(),
   /**
    * True when the profile update requested a new email that is awaiting
    * confirmation: the stored `email` is unchanged and a confirmation
    * link was sent to the new address.
    */
-  emailChangePending: z14.boolean().optional()
+  emailChangePending: z15.boolean().optional()
 });
-var UpdateProfileRequestSchema = z14.object({
-  userForm: z14.object({
-    name: z14.string().min(1, "Name is required"),
-    email: z14.string().email("Invalid email format"),
+var UpdateProfileRequestSchema = z15.object({
+  userForm: z15.object({
+    name: z15.string().min(1, "Name is required"),
+    email: z15.string().email("Invalid email format"),
     lang: LanguageSchema
   })
 });
-var UpdateThemeRequestSchema = z14.object({
+var UpdateThemeRequestSchema = z15.object({
   theme: ThemeSchema
 });
-var ThemeUpdateResponseSchema = z14.object({
-  status: z14.literal("ok"),
+var ThemeUpdateResponseSchema = z15.object({
+  status: z15.literal("ok"),
   theme: ThemeSchema
 });
-var PictureUploadResponseSchema = z14.object({
-  status: z14.boolean(),
-  url: z14.string().optional(),
-  message: z14.string().optional()
+var PictureUploadResponseSchema = z15.object({
+  status: z15.boolean(),
+  url: z15.string().optional(),
+  message: z15.string().optional()
 });
-var SuccessResponseSchema = z14.object({
-  status: z14.literal("ok"),
-  message: z14.string().optional()
+var SuccessResponseSchema = z15.object({
+  status: z15.literal("ok"),
+  message: z15.string().optional()
 });
-var ProfileErrorResponseSchema = z14.object({
-  status: z14.literal("error"),
+var ProfileErrorResponseSchema = z15.object({
+  status: z15.literal("error"),
   /** Stable code so the web can localize the message (e.g. EMAIL_TAKEN). */
-  code: z14.string().optional(),
-  message: z14.string().optional(),
-  errors: z14.array(z14.string()).optional()
+  code: z15.string().optional(),
+  message: z15.string().optional(),
+  errors: z15.array(z15.string()).optional()
 });
 var PASSWORD_REGEX = /^(?=.*[a-zA-Z])(?=.*\d)(?=.*[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?`~])[a-zA-Z\d!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?`~]+$/;
-var UpdatePasswordRequestSchema = z14.object({
-  oldPassword: z14.string().optional(),
-  newPassword: z14.string().min(8, "Password must be at least 8 characters").max(100, "Password must be at most 100 characters").regex(PASSWORD_REGEX, "Password must contain at least one letter, one digit, and one special character"),
-  newPasswordConfirm: z14.string()
+var UpdatePasswordRequestSchema = z15.object({
+  oldPassword: z15.string().optional(),
+  newPassword: z15.string().min(8, "Password must be at least 8 characters").max(100, "Password must be at most 100 characters").regex(PASSWORD_REGEX, "Password must contain at least one letter, one digit, and one special character"),
+  newPasswordConfirm: z15.string()
 }).refine((data) => data.newPassword === data.newPasswordConfirm, {
   message: "Passwords do not match",
   path: ["newPasswordConfirm"]
 });
-var PasswordUpdateSuccessSchema = z14.object({
-  status: z14.literal("ok"),
-  message: z14.string()
+var PasswordUpdateSuccessSchema = z15.object({
+  status: z15.literal("ok"),
+  message: z15.string()
 });
-var PasswordErrorResponseSchema = z14.object({
-  status: z14.literal("error"),
-  message: z14.string(),
-  errors: z14.array(z14.string()).optional()
+var PasswordErrorResponseSchema = z15.object({
+  status: z15.literal("error"),
+  message: z15.string(),
+  errors: z15.array(z15.string()).optional()
 });
-var RecentlyViewedPagesResponseSchema = z14.object({
-  pages: z14.array(PageSchema)
+var RecentlyViewedPagesResponseSchema = z15.object({
+  pages: z15.array(PageSchema)
 });
 
 // src/contracts/me.ts
@@ -1503,8 +1527,8 @@ var uploadPictureRoute = createRoute8({
     body: {
       content: {
         "multipart/form-data": {
-          schema: z15.object({
-            file: z15.any().optional().describe("Profile picture file")
+          schema: z16.object({
+            file: z16.any().optional().describe("Profile picture file")
           })
         }
       }
@@ -1604,37 +1628,37 @@ var meRoutes = {
 };
 
 // src/contracts/access-token.ts
-import { createRoute as createRoute9, z as z17 } from "@hono/zod-openapi";
+import { createRoute as createRoute9, z as z18 } from "@hono/zod-openapi";
 
 // src/schemas/access-token.ts
-import { z as z16 } from "@hono/zod-openapi";
-var AccessTokenSchema = z16.object({
-  id: z16.string(),
-  name: z16.string(),
-  scopes: z16.array(z16.string()),
+import { z as z17 } from "@hono/zod-openapi";
+var AccessTokenSchema = z17.object({
+  id: z17.string(),
+  name: z17.string(),
+  scopes: z17.array(z17.string()),
   /** ISO-8601 expiry, or `null` for a non-expiring token. */
-  expiresAt: z16.string().nullable(),
+  expiresAt: z17.string().nullable(),
   /** ISO-8601 of last successful use, or `null` if never used. */
-  lastUsedAt: z16.string().nullable(),
-  createdAt: z16.string()
+  lastUsedAt: z17.string().nullable(),
+  createdAt: z17.string()
 });
-var ListAccessTokensResponseSchema = z16.object({
-  accessTokens: z16.array(AccessTokenSchema)
+var ListAccessTokensResponseSchema = z17.object({
+  accessTokens: z17.array(AccessTokenSchema)
 });
-var CreateAccessTokenRequestSchema = z16.object({
-  name: z16.string().min(1, "Name is required").max(200),
-  scopes: z16.array(z16.string()).min(1, "At least one scope is required"),
-  expiresAt: z16.string().datetime().nullable().optional()
+var CreateAccessTokenRequestSchema = z17.object({
+  name: z17.string().min(1, "Name is required").max(200),
+  scopes: z17.array(z17.string()).min(1, "At least one scope is required"),
+  expiresAt: z17.string().datetime().nullable().optional()
 });
 var CreateAccessTokenResponseSchema = AccessTokenSchema.extend({
-  token: z16.string()
-});
-var InvalidScopeErrorSchema = z16.object({
-  error: z16.object({
-    code: z16.literal("INVALID_SCOPE"),
-    message: z16.string(),
-    details: z16.object({
-      invalidScopes: z16.array(z16.string())
+  token: z17.string()
+});
+var InvalidScopeErrorSchema = z17.object({
+  error: z17.object({
+    code: z17.literal("INVALID_SCOPE"),
+    message: z17.string(),
+    details: z17.object({
+      invalidScopes: z17.array(z17.string())
     }).optional()
   })
 });
@@ -1706,7 +1730,7 @@ var deleteAccessTokenRoute = createRoute9({
   security: [{ bearerAuth: [] }],
   summary: "Revoke a personal access token",
   request: {
-    params: z17.object({ id: z17.string() })
+    params: z18.object({ id: z18.string() })
   },
   responses: {
     200: {
@@ -1738,13 +1762,13 @@ var accessTokenRoutes = {
 };
 
 // src/contracts/oauth.ts
-import { createRoute as createRoute10, z as z20 } from "@hono/zod-openapi";
+import { createRoute as createRoute10, z as z21 } from "@hono/zod-openapi";
 
 // src/schemas/oauth-endpoints.ts
-import { z as z19 } from "@hono/zod-openapi";
+import { z as z20 } from "@hono/zod-openapi";
 
 // src/schemas/oauth.ts
-import { z as z18 } from "@hono/zod-openapi";
+import { z as z19 } from "@hono/zod-openapi";
 var SCOPES = [
   // umbrella
   "read",
@@ -1812,11 +1836,11 @@ function scopeSatisfies(required, granted) {
   return false;
 }
 var InsufficientScopeErrorSchema = ApiErrorSchema.extend({
-  error: z18.object({
-    code: z18.literal("INSUFFICIENT_SCOPE"),
-    message: z18.string(),
-    details: z18.object({
-      requiredScope: z18.string()
+  error: z19.object({
+    code: z19.literal("INSUFFICIENT_SCOPE"),
+    message: z19.string(),
+    details: z19.object({
+      requiredScope: z19.string()
     }).optional()
   })
 });
@@ -1835,91 +1859,91 @@ var OAUTH_ERROR_CODES = [
   "slow_down",
   "expired_token"
 ];
-var OAuthErrorSchema = z19.object({
-  error: z19.enum(OAUTH_ERROR_CODES),
-  error_description: z19.string().optional()
-});
-var AuthorizeRequestSchema = z19.object({
-  client_id: z19.string().min(1),
-  redirect_uri: z19.string().min(1),
-  scope: z19.string().min(1),
-  code_challenge: z19.string().min(1),
-  code_challenge_method: z19.literal("S256"),
-  state: z19.string().optional()
-});
-var AuthorizeResponseSchema = z19.object({
-  redirectUri: z19.string()
-});
-var TokenRequestSchema = z19.discriminatedUnion("grant_type", [
-  z19.object({
-    grant_type: z19.literal("authorization_code"),
-    code: z19.string().min(1),
-    code_verifier: z19.string().min(1),
-    redirect_uri: z19.string().min(1),
-    client_id: z19.string().min(1)
+var OAuthErrorSchema = z20.object({
+  error: z20.enum(OAUTH_ERROR_CODES),
+  error_description: z20.string().optional()
+});
+var AuthorizeRequestSchema = z20.object({
+  client_id: z20.string().min(1),
+  redirect_uri: z20.string().min(1),
+  scope: z20.string().min(1),
+  code_challenge: z20.string().min(1),
+  code_challenge_method: z20.literal("S256"),
+  state: z20.string().optional()
+});
+var AuthorizeResponseSchema = z20.object({
+  redirectUri: z20.string()
+});
+var TokenRequestSchema = z20.discriminatedUnion("grant_type", [
+  z20.object({
+    grant_type: z20.literal("authorization_code"),
+    code: z20.string().min(1),
+    code_verifier: z20.string().min(1),
+    redirect_uri: z20.string().min(1),
+    client_id: z20.string().min(1)
   }),
-  z19.object({
-    grant_type: z19.literal("refresh_token"),
-    refresh_token: z19.string().min(1),
-    client_id: z19.string().min(1),
-    scope: z19.string().optional()
+  z20.object({
+    grant_type: z20.literal("refresh_token"),
+    refresh_token: z20.string().min(1),
+    client_id: z20.string().min(1),
+    scope: z20.string().optional()
   }),
   // RFC 8628 §3.4 — device authorization grant. The client polls with the
   // opaque `device_code` returned by `/oauth/device/authorize`.
-  z19.object({
-    grant_type: z19.literal("urn:ietf:params:oauth:grant-type:device_code"),
-    device_code: z19.string().min(1),
-    client_id: z19.string().min(1)
+  z20.object({
+    grant_type: z20.literal("urn:ietf:params:oauth:grant-type:device_code"),
+    device_code: z20.string().min(1),
+    client_id: z20.string().min(1)
   })
 ]);
 var DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
-var TokenResponseSchema = z19.object({
-  access_token: z19.string(),
-  token_type: z19.literal("Bearer"),
-  expires_in: z19.number(),
-  refresh_token: z19.string(),
-  scope: z19.string()
-});
-var RevokeRequestSchema = z19.object({
-  token: z19.string().min(1),
-  token_type_hint: z19.string().optional()
-});
-var RevokeResponseSchema = z19.object({});
-var DeviceAuthorizeRequestSchema = z19.object({
-  client_id: z19.string().min(1),
-  scope: z19.string().min(1)
-});
-var DeviceAuthorizeResponseSchema = z19.object({
-  device_code: z19.string(),
-  user_code: z19.string(),
-  verification_uri: z19.string(),
-  verification_uri_complete: z19.string(),
-  expires_in: z19.number(),
-  interval: z19.number()
-});
-var DeviceVerifyRequestSchema = z19.object({
-  user_code: z19.string().min(1),
-  action: z19.enum(["approve", "deny"])
-});
-var DeviceVerifyResponseSchema = z19.object({
-  status: z19.enum(["approved", "denied"])
-});
-var DeviceInfoResponseSchema = z19.object({
-  client_id: z19.string(),
-  scopes: z19.array(z19.string())
+var TokenResponseSchema = z20.object({
+  access_token: z20.string(),
+  token_type: z20.literal("Bearer"),
+  expires_in: z20.number(),
+  refresh_token: z20.string(),
+  scope: z20.string()
+});
+var RevokeRequestSchema = z20.object({
+  token: z20.string().min(1),
+  token_type_hint: z20.string().optional()
+});
+var RevokeResponseSchema = z20.object({});
+var DeviceAuthorizeRequestSchema = z20.object({
+  client_id: z20.string().min(1),
+  scope: z20.string().min(1)
+});
+var DeviceAuthorizeResponseSchema = z20.object({
+  device_code: z20.string(),
+  user_code: z20.string(),
+  verification_uri: z20.string(),
+  verification_uri_complete: z20.string(),
+  expires_in: z20.number(),
+  interval: z20.number()
+});
+var DeviceVerifyRequestSchema = z20.object({
+  user_code: z20.string().min(1),
+  action: z20.enum(["approve", "deny"])
+});
+var DeviceVerifyResponseSchema = z20.object({
+  status: z20.enum(["approved", "denied"])
+});
+var DeviceInfoResponseSchema = z20.object({
+  client_id: z20.string(),
+  scopes: z20.array(z20.string())
 });
 var GRANT_TYPES_SUPPORTED = ["authorization_code", "refresh_token", DEVICE_CODE_GRANT_TYPE];
-var DiscoveryResponseSchema = z19.object({
-  issuer: z19.string(),
-  authorization_endpoint: z19.string(),
-  token_endpoint: z19.string(),
-  revocation_endpoint: z19.string(),
-  device_authorization_endpoint: z19.string().optional(),
-  scopes_supported: z19.array(z19.string()),
-  response_types_supported: z19.array(z19.string()),
-  grant_types_supported: z19.array(z19.string()),
-  code_challenge_methods_supported: z19.array(z19.string()),
-  token_endpoint_auth_methods_supported: z19.array(z19.string())
+var DiscoveryResponseSchema = z20.object({
+  issuer: z20.string(),
+  authorization_endpoint: z20.string(),
+  token_endpoint: z20.string(),
+  revocation_endpoint: z20.string(),
+  device_authorization_endpoint: z20.string().optional(),
+  scopes_supported: z20.array(z20.string()),
+  response_types_supported: z20.array(z20.string()),
+  grant_types_supported: z20.array(z20.string()),
+  code_challenge_methods_supported: z20.array(z20.string()),
+  token_endpoint_auth_methods_supported: z20.array(z20.string())
 });
 var DISCOVERY_SCOPES_SUPPORTED = ISSUABLE_SCOPES;
 
@@ -2055,7 +2079,7 @@ var deviceInfoRoute = createRoute10({
   // scopes so the web consent screen can show them before approval. Reveals
   // no secret. Unknown / expired / non-pending → 404 (PHASE4-Q9 option A).
   request: {
-    query: z20.object({ user_code: z20.string().min(1) })
+    query: z21.object({ user_code: z21.string().min(1) })
   },
   responses: {
     200: {
@@ -2109,94 +2133,94 @@ var oauthRoutes = {
 };
 
 // src/contracts/user.ts
-import { createRoute as createRoute11, z as z23 } from "@hono/zod-openapi";
+import { createRoute as createRoute11, z as z24 } from "@hono/zod-openapi";
 
 // src/schemas/user.ts
-import { z as z22 } from "@hono/zod-openapi";
+import { z as z23 } from "@hono/zod-openapi";
 
 // src/schemas/bookmark.ts
-import { z as z21 } from "@hono/zod-openapi";
-var BookmarkSchema = z21.object({
-  _id: z21.string(),
+import { z as z22 } from "@hono/zod-openapi";
+var BookmarkSchema = z22.object({
+  _id: z22.string(),
   page: PageSchema,
-  user: z21.union([z21.string(), UserPublicSchema]),
-  createdAt: z21.string()
+  user: z22.union([z22.string(), UserPublicSchema]),
+  createdAt: z22.string()
 });
-var GetBookmarkRequestSchema = z21.object({
-  page_id: z21.string()
+var GetBookmarkRequestSchema = z22.object({
+  page_id: z22.string()
 });
-var BookmarkResponseSchema = z21.object({
+var BookmarkResponseSchema = z22.object({
   bookmark: BookmarkSchema.nullable()
 });
-var ListMyBookmarksResponseSchema = z21.object({
-  bookmarks: z21.array(BookmarkSchema),
+var ListMyBookmarksResponseSchema = z22.object({
+  bookmarks: z22.array(BookmarkSchema),
   pager: PagerSchema,
-  total: z21.number()
+  total: z22.number()
 });
-var AddBookmarkRequestSchema = z21.object({
-  page_id: z21.string()
+var AddBookmarkRequestSchema = z22.object({
+  page_id: z22.string()
 });
-var RemoveBookmarkRequestSchema = z21.object({
-  page_id: z21.string()
+var RemoveBookmarkRequestSchema = z22.object({
+  page_id: z22.string()
 });
-var RemoveBookmarkResponseSchema = z21.object({
-  ok: z21.literal(true)
+var RemoveBookmarkResponseSchema = z22.object({
+  ok: z22.literal(true)
 });
 
 // src/schemas/user.ts
-var UserStatusSchema = z22.enum(["1", "2", "3", "4", "5"]).transform((val) => Number(val));
+var UserStatusSchema = z23.enum(["1", "2", "3", "4", "5"]).transform((val) => Number(val));
 var UserStatusEnum = UserPublicStatus;
-var UserLanguageSchema = z22.enum(["en", "ja"]);
-var PaginationRequestSchema = z22.object({
-  limit: z22.coerce.number().optional().default(50),
-  offset: z22.coerce.number().optional().default(0)
-});
-var UserListItemSchema = z22.object({
-  _id: z22.string(),
-  username: z22.string(),
-  name: z22.string(),
-  image: z22.string().nullable().optional()
-});
-var ListUsersRequestSchema = z22.object({
-  q: z22.string().optional(),
+var UserLanguageSchema = z23.enum(["en", "ja"]);
+var PaginationRequestSchema = z23.object({
+  limit: z23.coerce.number().optional().default(50),
+  offset: z23.coerce.number().optional().default(0)
+});
+var UserListItemSchema = z23.object({
+  _id: z23.string(),
+  username: z23.string(),
+  name: z23.string(),
+  image: z23.string().nullable().optional()
+});
+var ListUsersRequestSchema = z23.object({
+  q: z23.string().optional(),
   // Cap the page size so a client can't request the whole user table in one
   // unbounded find+sort (mirrors the page-list `limit` guard).
-  limit: z22.coerce.number().int().min(1).max(100).optional().default(24),
-  offset: z22.coerce.number().int().min(0).optional().default(0)
+  limit: z23.coerce.number().int().min(1).max(100).optional().default(24),
+  offset: z23.coerce.number().int().min(0).optional().default(0)
 });
-var ListUsersResponseSchema = z22.object({
-  users: z22.array(UserListItemSchema),
+var ListUsersResponseSchema = z23.object({
+  users: z23.array(UserListItemSchema),
   pager: PagerSchema,
-  total: z22.number()
+  total: z23.number()
 });
-var UserPageResponseSchema = z22.object({
+var UserPageResponseSchema = z23.object({
   user: UserPublicSchema,
   // Page statistics
-  createdPagesCount: z22.number(),
-  bookmarksCount: z22.number(),
+  createdPagesCount: z23.number(),
+  bookmarksCount: z23.number(),
   // Optionally include recent items for initial display
-  recentPages: z22.array(PageSchema).optional(),
-  recentBookmarks: z22.array(BookmarkSchema).optional()
+  recentPages: z23.array(PageSchema).optional(),
+  recentBookmarks: z23.array(BookmarkSchema).optional()
 });
-var UserBookmarksResponseSchema = z22.object({
-  bookmarks: z22.array(BookmarkSchema),
+var UserBookmarksResponseSchema = z23.object({
+  bookmarks: z23.array(BookmarkSchema),
   pager: PagerSchema,
-  total: z22.number()
+  total: z23.number()
 });
-var UserPagesResponseSchema = z22.object({
-  pages: z22.array(PageSchema),
+var UserPagesResponseSchema = z23.object({
+  pages: z23.array(PageSchema),
   pager: PagerSchema,
-  total: z22.number()
+  total: z23.number()
 });
-var UserNotFoundErrorSchema = z22.object({
-  error: z22.object({
-    code: z22.literal("USER_NOT_FOUND"),
-    message: z22.literal("User not found")
+var UserNotFoundErrorSchema = z23.object({
+  error: z23.object({
+    code: z23.literal("USER_NOT_FOUND"),
+    message: z23.literal("User not found")
   })
 });
 
 // src/contracts/user.ts
-var UsernameParamSchema = z23.object({ username: z23.string() });
+var UsernameParamSchema = z24.object({ username: z24.string() });
 var getUserPageRoute = createRoute11({
   method: "get",
   path: "/user/{username}",
@@ -2439,34 +2463,34 @@ var bookmarkRoutes = {
 import { createRoute as createRoute13 } from "@hono/zod-openapi";
 
 // src/schemas/backlink.ts
-import { z as z24 } from "@hono/zod-openapi";
-var ObjectIdString = z24.string().regex(/^[0-9a-f]{24}$/, "Invalid ObjectId");
-var BacklinkFromPageSchema = z24.object({
-  _id: z24.string(),
-  path: z24.string()
-});
-var BacklinkFromRevisionSchema = z24.object({
-  _id: z24.string(),
+import { z as z25 } from "@hono/zod-openapi";
+var ObjectIdString = z25.string().regex(/^[0-9a-f]{24}$/, "Invalid ObjectId");
+var BacklinkFromPageSchema = z25.object({
+  _id: z25.string(),
+  path: z25.string()
+});
+var BacklinkFromRevisionSchema = z25.object({
+  _id: z25.string(),
   author: UserPublicSchema.nullable().optional()
 });
-var BacklinkSchema = z24.object({
-  _id: z24.string(),
+var BacklinkSchema = z25.object({
+  _id: z25.string(),
   // The destination page's id (the page being linked TO). Always the
   // page passed in the request, but echoed for cache-key parity with the
   // legacy response.
-  page: z24.string(),
+  page: z25.string(),
   fromPage: BacklinkFromPageSchema,
   fromRevision: BacklinkFromRevisionSchema,
-  updatedAt: z24.string()
+  updatedAt: z25.string()
 });
-var GetBacklinksRequestSchema = z24.object({
+var GetBacklinksRequestSchema = z25.object({
   page_id: ObjectIdString,
-  limit: z24.coerce.number().int().min(1).max(100).optional().default(20),
-  offset: z24.coerce.number().int().min(0).optional().default(0)
+  limit: z25.coerce.number().int().min(1).max(100).optional().default(20),
+  offset: z25.coerce.number().int().min(0).optional().default(0)
 });
-var GetBacklinksResponseSchema = z24.object({
-  backlinks: z24.array(BacklinkSchema),
-  hasNext: z24.boolean()
+var GetBacklinksResponseSchema = z25.object({
+  backlinks: z25.array(BacklinkSchema),
+  hasNext: z25.boolean()
 });
 
 // src/contracts/backlink.ts
@@ -2491,6 +2515,10 @@ var getBacklinksRoute = createRoute13({
     401: {
       description: "Authentication required",
       content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    404: {
+      description: "Page not found or not granted",
+      content: { "application/json": { schema: PageNotFoundErrorSchema } }
     }
   }
 });
@@ -2502,51 +2530,51 @@ var backlinkRoutes = {
 import { createRoute as createRoute14 } from "@hono/zod-openapi";
 
 // src/schemas/comment.ts
-import { z as z25 } from "@hono/zod-openapi";
-var CommentSchema = z25.object({
-  _id: z25.string(),
-  page: z25.string(),
+import { z as z26 } from "@hono/zod-openapi";
+var CommentSchema = z26.object({
+  _id: z26.string(),
+  page: z26.string(),
   // creator is populated to a user object on the API side; allow string fallback for safety
-  creator: z25.union([z25.string(), PageUserSchema]).nullable(),
-  revision: z25.string(),
-  comment: z25.string(),
-  commentPosition: z25.number().default(-1),
-  createdAt: z25.string()
-});
-var ListCommentsRequestSchema = z25.object({
-  page_id: z25.string().optional(),
-  revision_id: z25.string().optional()
-});
-var ListCommentsResponseSchema = z25.object({
-  comments: z25.array(CommentSchema)
-});
-var AddCommentRequestSchema = z25.object({
-  page_id: z25.string().min(1, "page_id is required"),
-  revision_id: z25.string().min(1, "revision_id is required"),
-  comment: z25.string().min(1, "comment is required"),
-  comment_position: z25.number().int().optional()
-});
-var AddCommentResponseSchema = z25.object({
+  creator: z26.union([z26.string(), PageUserSchema]).nullable(),
+  revision: z26.string(),
+  comment: z26.string(),
+  commentPosition: z26.number().default(-1),
+  createdAt: z26.string()
+});
+var ListCommentsRequestSchema = z26.object({
+  page_id: z26.string().optional(),
+  revision_id: z26.string().optional()
+});
+var ListCommentsResponseSchema = z26.object({
+  comments: z26.array(CommentSchema)
+});
+var AddCommentRequestSchema = z26.object({
+  page_id: z26.string().min(1, "page_id is required"),
+  revision_id: z26.string().min(1, "revision_id is required"),
+  comment: z26.string().min(1, "comment is required"),
+  comment_position: z26.number().int().optional()
+});
+var AddCommentResponseSchema = z26.object({
   comment: CommentSchema,
-  newlyWatching: z25.boolean()
+  newlyWatching: z26.boolean()
 });
-var DeleteCommentRequestSchema = z25.object({
-  comment_id: z25.string().min(1, "comment_id is required"),
-  page_id: z25.string().min(1, "page_id is required")
+var DeleteCommentRequestSchema = z26.object({
+  comment_id: z26.string().min(1, "comment_id is required"),
+  page_id: z26.string().min(1, "page_id is required")
 });
-var DeleteCommentResponseSchema = z25.object({
-  ok: z25.literal(true)
+var DeleteCommentResponseSchema = z26.object({
+  ok: z26.literal(true)
 });
-var CommentNotFoundErrorSchema = z25.object({
-  error: z25.object({
-    code: z25.literal("COMMENT_NOT_FOUND"),
-    message: z25.literal("Comment not found")
+var CommentNotFoundErrorSchema = z26.object({
+  error: z26.object({
+    code: z26.literal("COMMENT_NOT_FOUND"),
+    message: z26.literal("Comment not found")
   })
 });
-var CommentInvalidRequestErrorSchema = z25.object({
-  error: z25.object({
-    code: z25.literal("INVALID_REQUEST"),
-    message: z25.string()
+var CommentInvalidRequestErrorSchema = z26.object({
+  error: z26.object({
+    code: z26.literal("INVALID_REQUEST"),
+    message: z26.string()
   })
 });
 
@@ -2650,49 +2678,49 @@ var commentRoutes = {
 };
 
 // src/contracts/revision.ts
-import { createRoute as createRoute15, z as z27 } from "@hono/zod-openapi";
+import { createRoute as createRoute15, z as z28 } from "@hono/zod-openapi";
 
 // src/schemas/revision.ts
-import { z as z26 } from "@hono/zod-openapi";
-var RevisionMetaSchema = z26.object({
-  _id: z26.string(),
-  path: z26.string(),
+import { z as z27 } from "@hono/zod-openapi";
+var RevisionMetaSchema = z27.object({
+  _id: z27.string(),
+  path: z27.string(),
   author: PageUserSchema.nullable().optional(),
   savedBy: PageUserSchema.nullable().optional(),
-  contributors: z26.array(PageUserSchema).optional(),
+  contributors: z27.array(PageUserSchema).optional(),
   // RFC-0010 — edit channel. `web` (browser / collab editor) vs the API
   // token paths (`oauth` / `pat`). Absent on pre-RFC-0010 revisions. The
   // history UI shows an "app" chip for the token paths.
-  editVia: z26.enum(["web", "oauth", "pat"]).optional(),
-  createdAt: z26.string()
+  editVia: z27.enum(["web", "oauth", "pat"]).optional(),
+  createdAt: z27.string()
 });
-var ListRevisionsRequestSchema = z26.object({
-  limit: z26.coerce.number().int().positive().max(200).optional().default(50),
-  offset: z26.coerce.number().int().min(0).optional().default(0)
+var ListRevisionsRequestSchema = z27.object({
+  limit: z27.coerce.number().int().positive().max(200).optional().default(50),
+  offset: z27.coerce.number().int().min(0).optional().default(0)
 });
-var ListRevisionsResponseSchema = z26.object({
-  revisions: z26.array(RevisionMetaSchema),
+var ListRevisionsResponseSchema = z27.object({
+  revisions: z27.array(RevisionMetaSchema),
   pager: PagerSchema
 });
-var GetRevisionResponseSchema = z26.object({
+var GetRevisionResponseSchema = z27.object({
   revision: RevisionSchema
 });
-var GetRevisionsRequestSchema = z26.object({
-  ids: z26.string().min(1, "ids is required")
+var GetRevisionsRequestSchema = z27.object({
+  ids: z27.string().min(1, "ids is required")
 });
-var GetRevisionsResponseSchema = z26.object({
-  revisions: z26.array(RevisionSchema)
+var GetRevisionsResponseSchema = z27.object({
+  revisions: z27.array(RevisionSchema)
 });
-var RevisionInvalidRequestErrorSchema = z26.object({
-  error: z26.object({
-    code: z26.literal("INVALID_REQUEST"),
-    message: z26.string()
+var RevisionInvalidRequestErrorSchema = z27.object({
+  error: z27.object({
+    code: z27.literal("INVALID_REQUEST"),
+    message: z27.string()
   })
 });
 
 // src/contracts/revision.ts
-var PageIdParamSchema = z27.object({ page_id: z27.string() });
-var RevisionIdParamSchema = z27.object({ id: z27.string() });
+var PageIdParamSchema = z28.object({ page_id: z28.string() });
+var RevisionIdParamSchema = z28.object({ id: z28.string() });
 var listRevisionsRoute = createRoute15({
   method: "get",
   path: "/pages/{page_id}/revisions",
@@ -2788,24 +2816,24 @@ var revisionRoutes = {
 };
 
 // src/contracts/notification.ts
-import { createRoute as createRoute16, z as z29 } from "@hono/zod-openapi";
+import { createRoute as createRoute16, z as z30 } from "@hono/zod-openapi";
 
 // src/schemas/notification.ts
-import { z as z28 } from "@hono/zod-openapi";
-var NotificationStatusSchema = z28.enum(["UNREAD", "UNOPENED", "OPENED"]);
+import { z as z29 } from "@hono/zod-openapi";
+var NotificationStatusSchema = z29.enum(["UNREAD", "UNOPENED", "OPENED"]);
 var NotificationStatusEnum = {
   UNREAD: "UNREAD",
   UNOPENED: "UNOPENED",
   OPENED: "OPENED"
 };
-var NotificationActionSchema = z28.enum(["COMMENT", "LIKE", "MENTION", "UPDATE"]);
+var NotificationActionSchema = z29.enum(["COMMENT", "LIKE", "MENTION", "UPDATE"]);
 var NotificationActionEnum = {
   COMMENT: "COMMENT",
   LIKE: "LIKE",
   MENTION: "MENTION",
   UPDATE: "UPDATE"
 };
-var NotificationTargetModelSchema = z28.enum(["Page"]);
+var NotificationTargetModelSchema = z29.enum(["Page"]);
 var NotificationTargetModelEnum = {
   PAGE: "Page"
 };
@@ -2814,68 +2842,68 @@ var PageRefSchema = PageSchema.pick({
   path: true,
   status: true
 });
-var NotificationSchema = z28.object({
-  _id: z28.string(),
-  user: z28.string(),
+var NotificationSchema = z29.object({
+  _id: z29.string(),
+  user: z29.string(),
   targetModel: NotificationTargetModelSchema,
   target: PageRefSchema,
   action: NotificationActionSchema,
   status: NotificationStatusSchema,
-  actionUsers: z28.array(UserPublicSchema),
-  createdAt: z28.string()
+  actionUsers: z29.array(UserPublicSchema),
+  createdAt: z29.string()
 });
-var ListNotificationsRequestSchema = z28.object({
-  limit: z28.coerce.number().optional().default(10),
-  offset: z28.coerce.number().optional().default(0)
+var ListNotificationsRequestSchema = z29.object({
+  limit: z29.coerce.number().optional().default(10),
+  offset: z29.coerce.number().optional().default(0)
 });
-var ListNotificationsResponseSchema = z28.object({
-  notifications: z28.array(NotificationSchema),
+var ListNotificationsResponseSchema = z29.object({
+  notifications: z29.array(NotificationSchema),
   pager: PagerSchema
 });
-var MarkAllAsReadResponseSchema = z28.object({
-  ok: z28.literal(true)
+var MarkAllAsReadResponseSchema = z29.object({
+  ok: z29.literal(true)
 });
-var OpenNotificationParamSchema = z28.object({
-  id: z28.string()
+var OpenNotificationParamSchema = z29.object({
+  id: z29.string()
 });
-var OpenNotificationResponseSchema = z28.object({
+var OpenNotificationResponseSchema = z29.object({
   notification: NotificationSchema
 });
-var NotificationStatusResponseSchema = z28.object({
-  count: z28.number()
+var NotificationStatusResponseSchema = z29.object({
+  count: z29.number()
 });
-var NotificationNotFoundErrorSchema = z28.object({
-  error: z28.object({
-    code: z28.literal("NOTIFICATION_NOT_FOUND"),
-    message: z28.literal("Notification not found")
+var NotificationNotFoundErrorSchema = z29.object({
+  error: z29.object({
+    code: z29.literal("NOTIFICATION_NOT_FOUND"),
+    message: z29.literal("Notification not found")
   })
 });
-var NotificationsTokenResponseSchema = z28.object({
-  token: z28.string(),
-  selfUserId: z28.string(),
-  expiresAt: z28.string()
+var NotificationsTokenResponseSchema = z29.object({
+  token: z29.string(),
+  selfUserId: z29.string(),
+  expiresAt: z29.string()
 });
-var NotificationsTokenPayloadSchema = z28.object({
-  selfUserId: z28.string(),
+var NotificationsTokenPayloadSchema = z29.object({
+  selfUserId: z29.string(),
   // Random UUID mixed into every signed token so two tokens minted
   // within the same second still produce byte-different JWT strings.
   // The browser uses the token as a React effect dependency to drive
   // the WebSocket reconnect — without `jti`, the iat/exp pair is
   // identical at second granularity and the dep stays stable.
-  jti: z28.string().uuid(),
-  iat: z28.number().int(),
-  exp: z28.number().int()
+  jti: z29.string().uuid(),
+  iat: z29.number().int(),
+  exp: z29.number().int()
 });
-var NotificationsChangedMessageSchema = z28.object({
-  type: z28.literal("changed")
+var NotificationsChangedMessageSchema = z29.object({
+  type: z29.literal("changed")
 });
 var NotificationsServerMessageSchema = NotificationsChangedMessageSchema;
 
 // src/contracts/notification.ts
-var NotificationInvalidRequestErrorSchema = z29.object({
-  error: z29.object({
-    code: z29.literal("INVALID_REQUEST"),
-    message: z29.string()
+var NotificationInvalidRequestErrorSchema = z30.object({
+  error: z30.object({
+    code: z30.literal("INVALID_REQUEST"),
+    message: z30.string()
   })
 });
 var listNotificationsRoute = createRoute16({
@@ -3011,25 +3039,59 @@ var notificationRoutes = {
 };
 
 // src/contracts/page.ts
-import { createRoute as createRoute17, z as z30 } from "@hono/zod-openapi";
-var PageBadRequestErrorSchema = z30.object({
-  error: z30.object({
-    code: z30.string(),
-    message: z30.string()
+import { createRoute as createRoute17, z as z32 } from "@hono/zod-openapi";
+
+// src/schemas/autocomplete.ts
+import { z as z31 } from "@hono/zod-openapi";
+var AutocompleteRequestSchema = z31.object({
+  q: z31.string().min(1).max(128),
+  limit: z31.coerce.number().int().min(1).max(25).optional().default(10),
+  /**
+   * How `q` is matched against the candidate text. `'substring'` (the
+   * default, used by the editor's `@mention` / `[[wikilink]]` pickers)
+   * keeps the historical anywhere-in-string match. `'prefix'` anchors
+   * the match at the start — used by the "create page" modal, where the
+   * user is building a `/`-rooted path and only true prefixes are valid
+   * completions of what they have typed so far.
+   */
+  anchor: z31.enum(["substring", "prefix"]).optional().default("substring")
+});
+var AutocompleteResultSchema = z31.object({
+  id: z31.string(),
+  label: z31.string(),
+  display: z31.string(),
+  avatar: z31.string().nullable().optional(),
+  modifiedAt: z31.string().nullable().optional(),
+  score: z31.number()
+});
+var AutocompleteResponseSchema = z31.object({
+  results: z31.array(AutocompleteResultSchema)
+});
+var AutocompleteRateLimitErrorSchema = z31.object({
+  error: z31.literal("rate_limited"),
+  message: z31.string(),
+  retryAfterSeconds: z31.number()
+});
+
+// src/contracts/page.ts
+var PageBadRequestErrorSchema = z32.object({
+  error: z32.object({
+    code: z32.string(),
+    message: z32.string()
   })
 });
-var DeletePageRequestSchema = z30.object({
-  page_id: z30.string(),
-  revision_id: z30.string().optional(),
-  completely: z30.boolean().optional()
+var DeletePageRequestSchema = z32.object({
+  page_id: z32.string(),
+  revision_id: z32.string().optional(),
+  completely: z32.boolean().optional()
 });
-var RevertDeletedPageRequestSchema = z30.object({
-  page_id: z30.string()
+var RevertDeletedPageRequestSchema = z32.object({
+  page_id: z32.string()
 });
-var PageIdBodySchema = z30.object({
-  page_id: z30.string()
+var PageIdBodySchema = z32.object({
+  page_id: z32.string()
 });
-var PageResponseSchema = z30.object({ page: PageSchema });
+var PageResponseSchema = z32.object({ page: PageSchema });
 var getPageRoute = createRoute17({
   method: "get",
   path: "/pages",
@@ -3055,6 +3117,15 @@ var getPageRoute = createRoute17({
     404: {
       description: "Page not found",
       content: { "application/json": { schema: PageNotFoundErrorSchema } }
+    },
+    // feature-live-page-sync-reconcile — separates a genuine unknown-error
+    // 500 (e.g. a transient render-artifact / renderer failure) from the
+    // not-found/not-granted 404/403 branches above, so a reconcile head-GET
+    // can tell "page is really gone/forbidden" from "read failed, try
+    // again later" (see `packages/api/src/hono/handlers/page.ts`'s split catch).
+    500: {
+      description: "Internal server error",
+      content: { "application/json": { schema: InternalServerErrorSchema } }
     }
   }
 });
@@ -3306,6 +3377,52 @@ var unlikePageRoute = createRoute17({
     }
   }
 });
+var claimPageLinkAccessRoute = createRoute17({
+  method: "post",
+  path: "/pages/link-access",
+  tags: ["page"],
+  security: [{ bearerAuth: [] }],
+  summary: "Resolve a page by id, granting first-time link-share access to GRANT_RESTRICTED pages",
+  request: {
+    body: {
+      content: { "application/json": { schema: PageIdBodySchema } }
+    }
+  },
+  responses: {
+    200: {
+      description: "The resolved page, with `granted` telling whether this call just added the caller to grantedUsers",
+      content: { "application/json": { schema: ClaimPageLinkAccessResponseSchema } }
+    },
+    400: {
+      description: "Invalid page_id",
+      content: { "application/json": { schema: InvalidPageIdErrorSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    403: {
+      description: "The caller has no access to the page (isGrantedFor is false) or lacks scope / is a non-web session \u2014 403 is about the caller lacking access, never about the page grant type per se",
+      content: {
+        "application/json": {
+          schema: z32.union([PageNotGrantedErrorSchema, InsufficientScopeErrorSchema])
+        }
+      }
+    },
+    404: {
+      description: "Page not found",
+      content: { "application/json": { schema: PageNotFoundErrorSchema } }
+    },
+    // Per-user rate limit (30 req/min) — same wire shape as autocomplete's
+    // 429 (`{ error: 'rate_limited', message, retryAfterSeconds }`), reused
+    // rather than duplicated (see the `AutocompleteRateLimitErrorSchema`
+    // import above).
+    429: {
+      description: "Rate limit exceeded for POST /pages/link-access (per-user). Same wire shape as autocomplete rate limiting.",
+      content: { "application/json": { schema: AutocompleteRateLimitErrorSchema } }
+    }
+  }
+});
 var getWatchStatusRoute = createRoute17({
   method: "get",
   path: "/pages/watch",
@@ -3478,7 +3595,7 @@ var renamePageRoute = createRoute17({
       description: "PAGE_INVALID_NAME / PAGE_EXISTS / PAGE_RENAME_FAILED / PAGE_RENAME_TREE_FAILED",
       content: {
         "application/json": {
-          schema: z30.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
+          schema: z32.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
         }
       }
     },
@@ -3516,7 +3633,7 @@ var renameSubtreeRoute = createRoute17({
       description: "PAGE_INVALID_NAME / PAGE_RENAME_TREE_FAILED (collisions, nothing to move, or partial failure)",
       content: {
         "application/json": {
-          schema: z30.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
+          schema: z32.union([PageBadRequestErrorSchema, RenameTreeErrorSchema])
         }
       }
     },
@@ -3547,6 +3664,8 @@ var pageRoutes = {
   likePageRoute,
   // POST /pages/unlike — unlikePage
   unlikePageRoute,
+  // POST /pages/link-access — claimPageLinkAccess (grant-on-first-access)
+  claimPageLinkAccessRoute,
   // GET /pages/watch — getWatchStatus
   getWatchStatusRoute,
   // PUT /pages/watch — setWatchStatus
@@ -3567,12 +3686,12 @@ var pageRoutes = {
 import { createRoute as createRoute18 } from "@hono/zod-openapi";
 
 // src/schemas/page-preview.ts
-import { z as z31 } from "@hono/zod-openapi";
-var PreviewPageRequestSchema = z31.object({
-  body: z31.string()
+import { z as z33 } from "@hono/zod-openapi";
+var PreviewPageRequestSchema = z33.object({
+  body: z33.string()
 });
-var PreviewPageResponseSchema = z31.object({
-  renderedAst: z31.unknown()
+var PreviewPageResponseSchema = z33.object({
+  renderedAst: z33.unknown()
 });
 
 // src/contracts/page-preview.ts
@@ -3607,9 +3726,9 @@ var pagePreviewRoutes = {
 };
 
 // src/contracts/page-collab.ts
-import { createRoute as createRoute19, z as z32 } from "@hono/zod-openapi";
-var PageIdPathParamsSchema = z32.object({
-  id: z32.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+import { createRoute as createRoute19, z as z34 } from "@hono/zod-openapi";
+var PageIdPathParamsSchema = z34.object({
+  id: z34.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
 var getYjsTokenRoute = createRoute19({
   method: "get",
@@ -3648,77 +3767,77 @@ var pageCollabRoutes = {
 };
 
 // src/contracts/presence.ts
-import { createRoute as createRoute20, z as z34 } from "@hono/zod-openapi";
+import { createRoute as createRoute20, z as z36 } from "@hono/zod-openapi";
 
 // src/schemas/presence.ts
-import { z as z33 } from "@hono/zod-openapi";
-var PresenceTokenResponseSchema = z33.object({
-  token: z33.string(),
-  pageId: z33.string(),
-  selfUserId: z33.string(),
-  expiresAt: z33.string()
-});
-var PresenceTokenPayloadSchema = z33.object({
-  userId: z33.string(),
-  pageId: z33.string(),
-  iat: z33.number().int(),
-  exp: z33.number().int()
-});
-var PresenceViewerSchema = z33.object({
-  userId: z33.string(),
-  username: z33.string(),
-  displayName: z33.string(),
-  avatarUrl: z33.string().nullable(),
-  isEditing: z33.boolean(),
-  joinedAt: z33.number().int()
-});
-var PresenceHeartbeatMessageSchema = z33.object({
-  type: z33.literal("heartbeat")
+import { z as z35 } from "@hono/zod-openapi";
+var PresenceTokenResponseSchema = z35.object({
+  token: z35.string(),
+  pageId: z35.string(),
+  selfUserId: z35.string(),
+  expiresAt: z35.string()
+});
+var PresenceTokenPayloadSchema = z35.object({
+  userId: z35.string(),
+  pageId: z35.string(),
+  iat: z35.number().int(),
+  exp: z35.number().int()
+});
+var PresenceViewerSchema = z35.object({
+  userId: z35.string(),
+  username: z35.string(),
+  displayName: z35.string(),
+  avatarUrl: z35.string().nullable(),
+  isEditing: z35.boolean(),
+  joinedAt: z35.number().int()
+});
+var PresenceHeartbeatMessageSchema = z35.object({
+  type: z35.literal("heartbeat")
 });
 var PresenceClientMessageSchema = PresenceHeartbeatMessageSchema;
-var PresenceViewersMessageSchema = z33.object({
-  type: z33.literal("viewers"),
-  viewers: z33.array(PresenceViewerSchema)
-});
-var PresencePageUpdatedMessageSchema = z33.object({
-  type: z33.literal("page-updated"),
-  pageId: z33.string(),
-  revisionId: z33.string(),
-  editorUserId: z33.string(),
-  editorDisplayName: z33.string()
-});
-var PresenceCommentChangedMessageSchema = z33.object({
-  type: z33.literal("comment-changed"),
-  pageId: z33.string(),
-  changeType: z33.enum(["added", "removed"]),
-  commentId: z33.string(),
-  actorUserId: z33.string().optional()
-});
-var PresenceServerMessageSchema = z33.discriminatedUnion("type", [
+var PresenceViewersMessageSchema = z35.object({
+  type: z35.literal("viewers"),
+  viewers: z35.array(PresenceViewerSchema)
+});
+var PresencePageUpdatedMessageSchema = z35.object({
+  type: z35.literal("page-updated"),
+  pageId: z35.string(),
+  revisionId: z35.string(),
+  editorUserId: z35.string(),
+  editorDisplayName: z35.string()
+});
+var PresenceCommentChangedMessageSchema = z35.object({
+  type: z35.literal("comment-changed"),
+  pageId: z35.string(),
+  changeType: z35.enum(["added", "removed"]),
+  commentId: z35.string(),
+  actorUserId: z35.string().optional()
+});
+var PresenceServerMessageSchema = z35.discriminatedUnion("type", [
   PresenceViewersMessageSchema,
   PresencePageUpdatedMessageSchema,
   PresenceCommentChangedMessageSchema
 ]);
-var LikerSchema = z33.object({
-  id: z33.string(),
-  username: z33.string(),
-  displayName: z33.string(),
-  avatarUrl: z33.string().nullable(),
-  likedAt: z33.string().nullable()
-});
-var LikersResponseSchema = z33.object({
-  users: z33.array(LikerSchema),
-  totalCount: z33.number().int().nonnegative()
-});
-var GetLikersRequestSchema = z33.object({
+var LikerSchema = z35.object({
+  id: z35.string(),
+  username: z35.string(),
+  displayName: z35.string(),
+  avatarUrl: z35.string().nullable(),
+  likedAt: z35.string().nullable()
+});
+var LikersResponseSchema = z35.object({
+  users: z35.array(LikerSchema),
+  totalCount: z35.number().int().nonnegative()
+});
+var GetLikersRequestSchema = z35.object({
   // Optional cap on returned `users`. `totalCount` always reflects the
   // full count regardless of `limit`. Omit for the full list.
-  limit: z33.coerce.number().int().positive().optional()
+  limit: z35.coerce.number().int().positive().optional()
 });
 
 // src/contracts/presence.ts
-var PageIdPathParamsSchema2 = z34.object({
-  id: z34.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var PageIdPathParamsSchema2 = z36.object({
+  id: z36.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
 var getPresenceTokenRoute = createRoute20({
   method: "get",
@@ -3791,48 +3910,48 @@ var presenceRoutes = {
 };
 
 // src/contracts/draft.ts
-import { createRoute as createRoute21, z as z36 } from "@hono/zod-openapi";
+import { createRoute as createRoute21, z as z38 } from "@hono/zod-openapi";
 
 // src/schemas/draft.ts
-import { z as z35 } from "@hono/zod-openapi";
-var CreateDraftRequestSchema = z35.object({
-  path: z35.string().min(1),
-  initialBody: z35.string().optional()
+import { z as z37 } from "@hono/zod-openapi";
+var CreateDraftRequestSchema = z37.object({
+  path: z37.string().min(1),
+  initialBody: z37.string().optional()
 });
-var CreateDraftResponseSchema = z35.object({
-  pageId: z35.string()
+var CreateDraftResponseSchema = z37.object({
+  pageId: z37.string()
 });
-var DraftConflictOwnerSchema = z35.object({
-  id: z35.string(),
-  username: z35.string(),
-  displayName: z35.string()
+var DraftConflictOwnerSchema = z37.object({
+  id: z37.string(),
+  username: z37.string(),
+  displayName: z37.string()
 });
-var DraftPathConflictErrorSchema = z35.object({
-  error: z35.literal("path_taken_by_draft"),
+var DraftPathConflictErrorSchema = z37.object({
+  error: z37.literal("path_taken_by_draft"),
   owner: DraftConflictOwnerSchema,
-  message: z35.string()
+  message: z37.string()
 });
-var DraftBadRequestErrorSchema = z35.object({
-  error: z35.enum(["invalid_path", "path_taken"]),
-  message: z35.string()
+var DraftBadRequestErrorSchema = z37.object({
+  error: z37.enum(["invalid_path", "path_taken"]),
+  message: z37.string()
 });
-var DraftNotFoundErrorSchema = z35.object({
-  error: z35.literal("draft_not_found"),
-  message: z35.string()
+var DraftNotFoundErrorSchema = z37.object({
+  error: z37.literal("draft_not_found"),
+  message: z37.string()
 });
-var DraftSummarySchema = z35.object({
-  pageId: z35.string(),
-  path: z35.string(),
-  createdAt: z35.string(),
-  updatedAt: z35.string()
+var DraftSummarySchema = z37.object({
+  pageId: z37.string(),
+  path: z37.string(),
+  createdAt: z37.string(),
+  updatedAt: z37.string()
 });
-var ListDraftsResponseSchema = z35.object({
-  drafts: z35.array(DraftSummarySchema)
+var ListDraftsResponseSchema = z37.object({
+  drafts: z37.array(DraftSummarySchema)
 });
 
 // src/contracts/draft.ts
-var DraftIdPathParamsSchema = z36.object({
-  id: z36.string().openapi({ description: "Draft page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var DraftIdPathParamsSchema = z38.object({
+  id: z38.string().openapi({ description: "Draft page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
 var createDraftRoute = createRoute21({
   method: "post",
@@ -3913,40 +4032,6 @@ var draftRoutes = {
 
 // src/contracts/autocomplete.ts
 import { createRoute as createRoute22 } from "@hono/zod-openapi";
-
-// src/schemas/autocomplete.ts
-import { z as z37 } from "@hono/zod-openapi";
-var AutocompleteRequestSchema = z37.object({
-  q: z37.string().min(1).max(128),
-  limit: z37.coerce.number().int().min(1).max(25).optional().default(10),
-  /**
-   * How `q` is matched against the candidate text. `'substring'` (the
-   * default, used by the editor's `@mention` / `[[wikilink]]` pickers)
-   * keeps the historical anywhere-in-string match. `'prefix'` anchors
-   * the match at the start — used by the "create page" modal, where the
-   * user is building a `/`-rooted path and only true prefixes are valid
-   * completions of what they have typed so far.
-   */
-  anchor: z37.enum(["substring", "prefix"]).optional().default("substring")
-});
-var AutocompleteResultSchema = z37.object({
-  id: z37.string(),
-  label: z37.string(),
-  display: z37.string(),
-  avatar: z37.string().nullable().optional(),
-  modifiedAt: z37.string().nullable().optional(),
-  score: z37.number()
-});
-var AutocompleteResponseSchema = z37.object({
-  results: z37.array(AutocompleteResultSchema)
-});
-var AutocompleteRateLimitErrorSchema = z37.object({
-  error: z37.literal("rate_limited"),
-  message: z37.string(),
-  retryAfterSeconds: z37.number()
-});
-
-// src/contracts/autocomplete.ts
 var autocompleteUsersRoute = createRoute22({
   method: "get",
   path: "/users/autocomplete",
@@ -4009,50 +4094,50 @@ var autocompleteRoutes = {
 };
 
 // src/contracts/attachment.ts
-import { createRoute as createRoute23, z as z39 } from "@hono/zod-openapi";
+import { createRoute as createRoute23, z as z40 } from "@hono/zod-openapi";
 
 // src/schemas/attachment.ts
-import { z as z38 } from "@hono/zod-openapi";
-var AttachmentSchema = z38.object({
-  _id: z38.string(),
-  page: z38.string(),
+import { z as z39 } from "@hono/zod-openapi";
+var AttachmentSchema = z39.object({
+  _id: z39.string(),
+  page: z39.string(),
   creator: UserPublicSchema,
-  filePath: z38.string(),
-  fileName: z38.string(),
-  originalName: z38.string(),
-  fileFormat: z38.string(),
-  fileSize: z38.number(),
-  createdAt: z38.string(),
-  url: z38.string(),
-  inUse: z38.boolean()
+  filePath: z39.string(),
+  fileName: z39.string(),
+  originalName: z39.string(),
+  fileFormat: z39.string(),
+  fileSize: z39.number(),
+  createdAt: z39.string(),
+  url: z39.string(),
+  inUse: z39.boolean()
 });
 var AttachmentMetaSchema = AttachmentSchema.omit({ inUse: true });
-var ListAttachmentsResponseSchema = z38.object({
-  attachments: z38.array(AttachmentSchema)
+var ListAttachmentsResponseSchema = z39.object({
+  attachments: z39.array(AttachmentSchema)
 });
-var PastAttachmentUsageSchema = z38.object({
+var PastAttachmentUsageSchema = z39.object({
   attachment: AttachmentSchema,
-  referencingRevisions: z38.array(
-    z38.object({
-      revisionId: z38.string(),
-      createdAt: z38.string(),
+  referencingRevisions: z39.array(
+    z39.object({
+      revisionId: z39.string(),
+      createdAt: z39.string(),
       author: UserPublicSchema
     })
   )
 });
-var AttachmentUsageResponseSchema = z38.object({
-  pagePath: z38.string(),
-  latest: z38.array(AttachmentSchema),
-  past: z38.array(PastAttachmentUsageSchema)
+var AttachmentUsageResponseSchema = z39.object({
+  pagePath: z39.string(),
+  latest: z39.array(AttachmentSchema),
+  past: z39.array(PastAttachmentUsageSchema)
 });
-var AddAttachmentResponseSchema = z38.object({
+var AddAttachmentResponseSchema = z39.object({
   attachment: AttachmentSchema,
-  url: z38.string()
+  url: z39.string()
 });
-var RemoveAttachmentResponseSchema = z38.object({
-  success: z38.literal(true)
+var RemoveAttachmentResponseSchema = z39.object({
+  success: z39.literal(true)
 });
-var AttachmentErrorCodeSchema = z38.enum([
+var AttachmentErrorCodeSchema = z39.enum([
   "INVALID_PAGE_ID",
   "PAGE_NOT_FOUND",
   "FILE_MISSING",
@@ -4064,41 +4149,41 @@ var AttachmentErrorCodeSchema = z38.enum([
   "UPLOAD_FAILED",
   "REMOVE_FAILED"
 ]);
-var AttachmentErrorSchema = z38.object({
-  error: z38.object({
+var AttachmentErrorSchema = z39.object({
+  error: z39.object({
     code: AttachmentErrorCodeSchema,
-    message: z38.string()
+    message: z39.string()
   })
 });
-var UploadAttachmentResponseSchema = z38.object({
-  url: z38.string(),
-  filename: z38.string(),
-  mimeType: z38.string(),
-  sizeBytes: z38.number()
+var UploadAttachmentResponseSchema = z39.object({
+  url: z39.string(),
+  filename: z39.string(),
+  mimeType: z39.string(),
+  sizeBytes: z39.number()
 });
-var UploadAttachmentErrorCodeSchema = z38.enum(["too_large", "disallowed_type", "rate_limited", "no_permission"]);
-var UploadAttachmentErrorSchema = z38.object({
+var UploadAttachmentErrorCodeSchema = z39.enum(["too_large", "disallowed_type", "rate_limited", "no_permission"]);
+var UploadAttachmentErrorSchema = z39.object({
   error: UploadAttachmentErrorCodeSchema,
-  message: z38.string(),
-  details: z38.record(z38.string(), z38.unknown()).optional()
+  message: z39.string(),
+  details: z39.record(z39.string(), z39.unknown()).optional()
 });
 var IMAGE_UPLOAD_MIME = ["image/png", "image/jpeg", "image/gif", "image/webp", "image/svg+xml"];
 var DND_EXTRA_UPLOAD_MIME = ["application/pdf", "text/plain", "text/markdown", "text/csv", "application/zip"];
 
 // src/contracts/attachment.ts
-var PageIdPathParamsSchema3 = z39.object({
-  pageId: z39.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var PageIdPathParamsSchema3 = z40.object({
+  pageId: z40.string().openapi({ description: "Page id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var AttachmentIdPathParamsSchema = z39.object({
-  id: z39.string().openapi({ description: "Attachment id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
+var AttachmentIdPathParamsSchema = z40.object({
+  id: z40.string().openapi({ description: "Attachment id (24-char hex ObjectId)", example: "507f1f77bcf86cd799439011" })
 });
-var AddAttachmentBodySchema = z39.object({
-  file: z39.any().openapi({ type: "string", format: "binary" }).optional()
+var AddAttachmentBodySchema = z40.object({
+  file: z40.any().openapi({ type: "string", format: "binary" }).optional()
 });
-var UploadAttachmentBodySchema = z39.object({
-  file: z39.any().openapi({ type: "string", format: "binary" }).optional(),
-  pageId: z39.string().optional(),
-  intent: z39.string().optional().openapi({ enum: ["paste", "dnd"] })
+var UploadAttachmentBodySchema = z40.object({
+  file: z40.any().openapi({ type: "string", format: "binary" }).optional(),
+  pageId: z40.string().optional(),
+  intent: z40.string().optional().openapi({ enum: ["paste", "dnd"] })
 });
 var listAttachmentsRoute = createRoute23({
   method: "get",
@@ -4335,30 +4420,30 @@ var attachmentRoutes = {
 import { createRoute as createRoute24 } from "@hono/zod-openapi";
 
 // src/schemas/search.ts
-import { z as z40 } from "@hono/zod-openapi";
-var SearchPageTypeSchema = z40.enum(["portal", "public", "user"]);
-var SearchPagesRequestSchema = z40.object({
-  q: z40.string().min(1),
-  tree: z40.string().optional(),
+import { z as z41 } from "@hono/zod-openapi";
+var SearchPageTypeSchema = z41.enum(["portal", "public", "user"]);
+var SearchPagesRequestSchema = z41.object({
+  q: z41.string().min(1),
+  tree: z41.string().optional(),
   type: SearchPageTypeSchema.optional(),
-  page: z40.coerce.number().int().min(1).default(1),
-  limit: z40.coerce.number().int().min(1).max(100).default(50)
-});
-var SearchHitSchema = z40.object({
-  pageId: z40.string(),
-  path: z40.string(),
-  score: z40.number().optional(),
-  snippet: z40.string().optional(),
-  bookmarkCount: z40.number(),
+  page: z41.coerce.number().int().min(1).default(1),
+  limit: z41.coerce.number().int().min(1).max(100).default(50)
+});
+var SearchHitSchema = z41.object({
+  pageId: z41.string(),
+  path: z41.string(),
+  score: z41.number().optional(),
+  snippet: z41.string().optional(),
+  bookmarkCount: z41.number(),
   page: PageSchema
 });
-var SearchPagesResponseSchema = z40.object({
-  meta: z40.object({
-    took: z40.number().optional(),
-    total: z40.number(),
-    results: z40.number()
+var SearchPagesResponseSchema = z41.object({
+  meta: z41.object({
+    took: z41.number().optional(),
+    total: z41.number(),
+    results: z41.number()
   }),
-  data: z40.array(SearchHitSchema)
+  data: z41.array(SearchHitSchema)
 });
 
 // src/contracts/search.ts
@@ -4402,31 +4487,31 @@ var searchRoutes = {
 import { createRoute as createRoute25 } from "@hono/zod-openapi";
 
 // src/schemas/adminCrypto.ts
-import { z as z41 } from "@hono/zod-openapi";
-var SensitiveConfigEntrySchema = z41.object({
-  ns: z41.string(),
-  key: z41.string(),
-  present: z41.boolean(),
-  encrypted: z41.boolean()
-});
-var CryptoStatusResponseSchema = z41.object({
+import { z as z42 } from "@hono/zod-openapi";
+var SensitiveConfigEntrySchema = z42.object({
+  ns: z42.string(),
+  key: z42.string(),
+  present: z42.boolean(),
+  encrypted: z42.boolean()
+});
+var CryptoStatusResponseSchema = z42.object({
   /** False when CROWI_ENCRYPTION_KEY is not configured — UI shows a setup hint. */
-  encryptionConfigured: z41.boolean(),
-  unencryptedCount: z41.number().int().min(0),
-  encryptedCount: z41.number().int().min(0),
-  entries: z41.array(SensitiveConfigEntrySchema)
+  encryptionConfigured: z42.boolean(),
+  unencryptedCount: z42.number().int().min(0),
+  encryptedCount: z42.number().int().min(0),
+  entries: z42.array(SensitiveConfigEntrySchema)
 });
-var ReencryptResponseSchema = z41.object({
-  rewritten: z41.number().int().min(0),
+var ReencryptResponseSchema = z42.object({
+  rewritten: z42.number().int().min(0),
   /** Already encrypted, skipped on this run. */
-  alreadyEncrypted: z41.number().int().min(0),
+  alreadyEncrypted: z42.number().int().min(0),
   /** Sensitive registry entries that had no row in the DB at all. */
-  missing: z41.number().int().min(0)
+  missing: z42.number().int().min(0)
 });
-var EncryptionNotConfiguredErrorSchema = z41.object({
-  error: z41.object({
-    code: z41.literal("ENCRYPTION_NOT_CONFIGURED"),
-    message: z41.string()
+var EncryptionNotConfiguredErrorSchema = z42.object({
+  error: z42.object({
+    code: z42.literal("ENCRYPTION_NOT_CONFIGURED"),
+    message: z42.string()
   })
 });
 
@@ -4494,53 +4579,53 @@ var adminCryptoRoutes = {
 import { createRoute as createRoute26 } from "@hono/zod-openapi";
 
 // src/schemas/admin/app.ts
-import { z as z43 } from "@hono/zod-openapi";
-var GetAppSettingsResponseSchema = z43.object({
-  app: z43.object({
-    title: z43.string(),
-    confidential: z43.string()
+import { z as z44 } from "@hono/zod-openapi";
+var GetAppSettingsResponseSchema = z44.object({
+  app: z44.object({
+    title: z44.string(),
+    confidential: z44.string()
   }),
   /**
    * Whether a storage driver is registered (i.e. uploads are wired up).
    * Sourced from `Config.isUploadable()` which now consults PluginManager.
    */
-  isUploadable: z43.boolean(),
+  isUploadable: z44.boolean(),
   /**
    * The Open / Restricted / Closed → open / restricted / closed mapping the
    * legacy admin controller exposed. Useful for the UI to render the current
    * registration mode label without knowing the internal capitalisation.
    */
-  registrationMode: z43.record(z43.string(), z43.string()),
+  registrationMode: z44.record(z44.string(), z44.string()),
   /**
    * Whether the admin has dismissed the initial-setup checklist on the
    * dashboard. Persisted server-side (`app:setupChecklistDismissed`) so the
    * dismissal holds across browsers and devices, not just one localStorage.
    */
-  setupChecklistDismissed: z43.boolean()
+  setupChecklistDismissed: z44.boolean()
 });
-var UpdateAppSettingsRequestSchema = z43.object({
-  app: z43.object({
-    title: z43.string().trim().min(1).max(100).optional(),
-    confidential: z43.string().max(500).optional()
+var UpdateAppSettingsRequestSchema = z44.object({
+  app: z44.object({
+    title: z44.string().trim().min(1).max(100).optional(),
+    confidential: z44.string().max(500).optional()
   }).optional(),
   /**
    * Toggle the dashboard initial-setup checklist's dismissed state. Sent on
    * its own (without the `app` block) when the admin clicks "mark as done".
    */
-  setupChecklistDismissed: z43.boolean().optional()
+  setupChecklistDismissed: z44.boolean().optional()
 }).strict();
-var UpdateAppSettingsResponseSchema = z43.object({
-  ok: z43.literal(true)
-});
-var AppSettingsValidationErrorSchema = z43.object({
-  bodyResult: z43.object({
-    issues: z43.array(
-      z43.object({
-        path: z43.array(z43.union([z43.string(), z43.number()])),
-        message: z43.string()
+var UpdateAppSettingsResponseSchema = z44.object({
+  ok: z44.literal(true)
+});
+var AppSettingsValidationErrorSchema = z44.object({
+  bodyResult: z44.object({
+    issues: z44.array(
+      z44.object({
+        path: z44.array(z44.union([z44.string(), z44.number()])),
+        message: z44.string()
       })
     ),
-    name: z43.string().optional()
+    name: z44.string().optional()
   })
 });
 
@@ -4622,18 +4707,18 @@ var adminAppRoutes = {
 import { createRoute as createRoute27 } from "@hono/zod-openapi";
 
 // src/schemas/admin/auth.ts
-import { z as z44 } from "@hono/zod-openapi";
-var AuthSettingsSchema = z44.object({
-  requireThirdPartyAuth: z44.boolean(),
-  disablePasswordAuth: z44.boolean()
+import { z as z45 } from "@hono/zod-openapi";
+var AuthSettingsSchema = z45.object({
+  requireThirdPartyAuth: z45.boolean(),
+  disablePasswordAuth: z45.boolean()
 });
 var UpdateAuthSettingsRequestSchema = AuthSettingsSchema;
 var GetAuthSettingsResponseSchema = AuthSettingsSchema;
 var UpdateAuthSettingsResponseSchema = AuthSettingsSchema;
-var ThirdPartyAuthUnavailableErrorSchema = z44.object({
-  error: z44.object({
-    code: z44.literal("THIRD_PARTY_AUTH_UNAVAILABLE"),
-    message: z44.string()
+var ThirdPartyAuthUnavailableErrorSchema = z45.object({
+  error: z45.object({
+    code: z45.literal("THIRD_PARTY_AUTH_UNAVAILABLE"),
+    message: z45.string()
   })
 });
 
@@ -4706,41 +4791,41 @@ var adminAuthRoutes = {
 import { createRoute as createRoute28 } from "@hono/zod-openapi";
 
 // src/schemas/admin/mail.ts
-import { z as z45 } from "@hono/zod-openapi";
-var GetMailSettingsResponseSchema = z45.object({
-  from: z45.string(),
-  activeDriver: z45.string(),
+import { z as z46 } from "@hono/zod-openapi";
+var GetMailSettingsResponseSchema = z46.object({
+  from: z46.string(),
+  activeDriver: z46.string(),
   /** npm name of the plugin that registered the active driver, for
    * linking to its config page. Empty when no sender is active. */
-  activePlugin: z45.string()
+  activePlugin: z46.string()
 });
-var UpdateMailSettingsRequestSchema = z45.object({
-  from: z45.string().trim().max(254).optional()
+var UpdateMailSettingsRequestSchema = z46.object({
+  from: z46.string().trim().max(254).optional()
 });
-var UpdateMailSettingsResponseSchema = z45.object({
-  ok: z45.literal(true)
+var UpdateMailSettingsResponseSchema = z46.object({
+  ok: z46.literal(true)
 });
-var SendTestMailRequestSchema = z45.object({}).optional();
-var SendTestMailResponseSchema = z45.object({
-  ok: z45.literal(true),
+var SendTestMailRequestSchema = z46.object({}).optional();
+var SendTestMailResponseSchema = z46.object({
+  ok: z46.literal(true),
   /** Address the test mail was dispatched to (= the calling admin's email). */
-  to: z45.string()
+  to: z46.string()
 });
-var SendTestMailErrorSchema = z45.object({
-  error: z45.object({
-    code: z45.literal("MAIL_TEST_FAILED"),
-    message: z45.string()
+var SendTestMailErrorSchema = z46.object({
+  error: z46.object({
+    code: z46.literal("MAIL_TEST_FAILED"),
+    message: z46.string()
   })
 });
-var MailSettingsValidationErrorSchema = z45.object({
-  bodyResult: z45.object({
-    issues: z45.array(
-      z45.object({
-        path: z45.array(z45.union([z45.string(), z45.number()])),
-        message: z45.string()
+var MailSettingsValidationErrorSchema = z46.object({
+  bodyResult: z46.object({
+    issues: z46.array(
+      z46.object({
+        path: z46.array(z46.union([z46.string(), z46.number()])),
+        message: z46.string()
       })
     ),
-    name: z45.string().optional()
+    name: z46.string().optional()
   })
 });
 
@@ -4855,30 +4940,30 @@ var adminMailRoutes = {
 };
 
 // src/contracts/admin/plugins.ts
-import { createRoute as createRoute29, z as z47 } from "@hono/zod-openapi";
+import { createRoute as createRoute29, z as z48 } from "@hono/zod-openapi";
 
 // src/schemas/admin/plugins.ts
-import { z as z46 } from "@hono/zod-openapi";
-var PluginFieldSchema = z46.object({
-  name: z46.string(),
+import { z as z47 } from "@hono/zod-openapi";
+var PluginFieldSchema = z47.object({
+  name: z47.string(),
   /**
    * Localized display label. Falls back to `name` in the form when absent.
    * Filled from the plugin's `configI18n[locale]` overlay by the admin API.
    */
-  label: z46.string().optional(),
-  kind: z46.enum(["string", "secret", "number", "boolean", "enum", "string-array"]),
-  description: z46.string().optional(),
-  defaultValue: z46.unknown().optional(),
-  options: z46.array(z46.string()).optional(),
-  action: z46.object({
-    label: z46.string(),
-    method: z46.string(),
-    path: z46.string()
+  label: z47.string().optional(),
+  kind: z47.enum(["string", "secret", "number", "boolean", "enum", "string-array"]),
+  description: z47.string().optional(),
+  defaultValue: z47.unknown().optional(),
+  options: z47.array(z47.string()).optional(),
+  action: z47.object({
+    label: z47.string(),
+    method: z47.string(),
+    path: z47.string()
   }).optional(),
-  optional: z46.boolean()
+  optional: z47.boolean()
 });
-var AdminSidebarSection = z46.enum(["settings", "shared", "storage", "mail", "notification", "auth", "search", "renderer", "platform"]);
-var PluginAdminPlacementSchema = z46.object({
+var AdminSidebarSection = z47.enum(["settings", "shared", "storage", "mail", "notification", "auth", "search", "renderer", "platform"]);
+var PluginAdminPlacementSchema = z47.object({
   /**
    * Sidebar section to surface this plugin under. The runtime fills
    * this in — it's either declared by the plugin via `adminPlacement`
@@ -4887,21 +4972,28 @@ var PluginAdminPlacementSchema = z46.object({
    */
   section: AdminSidebarSection,
   /** Display label (defaults to the plugin's npm name). */
-  label: z46.string(),
+  label: z47.string(),
   /** Lucide icon name from a fixed allow-list. */
-  icon: z46.string().optional()
+  icon: z47.string().optional()
 });
-var PluginInfoSchema = z46.object({
-  name: z46.string(),
-  version: z46.string(),
-  requires: z46.array(z46.string()).optional(),
+var PluginInfoSchema = z47.object({
+  name: z47.string(),
+  version: z47.string(),
+  requires: z47.array(z47.string()).optional(),
+  /**
+   * Core Mongoose model names this plugin declared in its
+   * `CrowiPlugin.modelAccess` allow-list — the only models it may
+   * reach via `ctx.model(name)`. Surfaced so an admin can audit which
+   * plugins touch which core collections.
+   */
+  modelAccess: z47.array(z47.string()).optional(),
   /** Has a configSchema (= showable config form). */
-  hasConfig: z46.boolean(),
+  hasConfig: z47.boolean(),
   /**
    * Driver-registry slots this plugin currently fills. Useful for the
    * admin "this plugin is the active storage driver" badge.
    */
-  registers: z46.array(z46.string()),
+  registers: z47.array(z47.string()),
   /**
    * Where the plugin appears in the admin sidebar. The server always
    * populates this even when the plugin didn't declare its own
@@ -4914,21 +5006,32 @@ var PluginInfoSchema = z46.object({
    * still apply their config on the next server restart; plugins with
    * it apply config changes live.
    */
-  supportsHotReload: z46.boolean()
+  supportsHotReload: z47.boolean(),
+  /**
+   * `'failed'` means the plugin's `activate()` call threw during boot
+   * (see `PluginManager.getFailedPlugins()`) — it is not in the loaded
+   * set, has no live driver registration, and its config form is not
+   * reachable. `'active'` (the default) is every plugin that activated
+   * successfully. Defaults to `'active'` for wire back-compat with
+   * responses that predate this field.
+   */
+  status: z47.enum(["active", "failed"]).default("active"),
+  /** Present only when `status: 'failed'` — the activation error message. */
+  error: z47.string().optional()
 });
-var ListPluginsResponseSchema = z46.object({
-  plugins: z46.array(PluginInfoSchema)
+var ListPluginsResponseSchema = z47.object({
+  plugins: z47.array(PluginInfoSchema)
 });
-var PluginConfigResponseSchema = z46.object({
-  name: z46.string(),
-  fields: z46.array(PluginFieldSchema),
-  values: z46.record(z46.string(), z46.unknown())
+var PluginConfigResponseSchema = z47.object({
+  name: z47.string(),
+  fields: z47.array(PluginFieldSchema),
+  values: z47.record(z47.string(), z47.unknown())
 });
-var UpdatePluginConfigRequestSchema = z46.object({
-  values: z46.record(z46.string(), z46.unknown())
+var UpdatePluginConfigRequestSchema = z47.object({
+  values: z47.record(z47.string(), z47.unknown())
 });
-var UpdatePluginConfigResponseSchema = z46.object({
-  ok: z46.literal(true),
+var UpdatePluginConfigResponseSchema = z47.object({
+  ok: z47.literal(true),
   /**
    * Whether at least one plugin's `reconfigure` hook ran successfully
    * for this save. `true` means the new values are already live on
@@ -4938,43 +5041,43 @@ var UpdatePluginConfigResponseSchema = z46.object({
    * "saved, but apply failed" warning in that case via the response
    * `reconfigureFailed` flag.
    */
-  hotReloaded: z46.boolean(),
+  hotReloaded: z47.boolean(),
   /**
    * True when at least one plugin's `reconfigure` was attempted and
    * threw. The save itself succeeded (Mongo + cache are updated) so
    * the next process boot will see the new values, but the *running*
    * process couldn't apply them. UI surfaces a warning toast.
    */
-  reconfigureFailed: z46.boolean()
+  reconfigureFailed: z47.boolean()
 });
-var PluginNotFoundErrorSchema = z46.object({
-  error: z46.object({
-    code: z46.literal("PLUGIN_NOT_FOUND"),
-    message: z46.string()
+var PluginNotFoundErrorSchema = z47.object({
+  error: z47.object({
+    code: z47.literal("PLUGIN_NOT_FOUND"),
+    message: z47.string()
   })
 });
-var PluginConfigValidationErrorSchema = z46.object({
-  error: z46.object({
-    code: z46.literal("PLUGIN_CONFIG_VALIDATION_FAILED"),
-    message: z46.string(),
-    issues: z46.array(
-      z46.object({
-        path: z46.array(z46.union([z46.string(), z46.number()])),
-        message: z46.string()
+var PluginConfigValidationErrorSchema = z47.object({
+  error: z47.object({
+    code: z47.literal("PLUGIN_CONFIG_VALIDATION_FAILED"),
+    message: z47.string(),
+    issues: z47.array(
+      z47.object({
+        path: z47.array(z47.union([z47.string(), z47.number()])),
+        message: z47.string()
       })
     )
   })
 });
-var ClearRenderCacheResponseSchema = z46.object({
-  ok: z46.literal(true),
-  clearedAt: z46.string(),
+var ClearRenderCacheResponseSchema = z47.object({
+  ok: z47.literal(true),
+  clearedAt: z47.string(),
   /** Number of cache rows removed. */
-  removedCount: z46.number().int().min(0)
+  removedCount: z47.number().int().min(0)
 });
 
 // src/contracts/admin/plugins.ts
-var PluginNameQuerySchema = z47.object({ name: z47.string() });
-var PluginConfigQuerySchema = z47.object({ name: z47.string(), locale: z47.string().optional() });
+var PluginNameQuerySchema = z48.object({ name: z48.string() });
+var PluginConfigQuerySchema = z48.object({ name: z48.string(), locale: z48.string().optional() });
 var listPluginsRoute = createRoute29({
   method: "get",
   path: "/admin/plugins",
@@ -5071,7 +5174,7 @@ var updatePluginConfigRoute = createRoute29({
     }
   }
 });
-var ClearRenderCacheBodySchema = z47.object({}).optional();
+var ClearRenderCacheBodySchema = z48.object({}).optional();
 var clearRenderCacheAllRoute = createRoute29({
   method: "post",
   path: "/admin/plugins/render-cache/clear-all",
@@ -5149,21 +5252,21 @@ var adminPluginsRoutes = {
 import { createRoute as createRoute30 } from "@hono/zod-openapi";
 
 // src/schemas/admin/search.ts
-import { z as z48 } from "@hono/zod-openapi";
-var SearchDriverEntrySchema = z48.object({
-  driverName: z48.string(),
-  pluginName: z48.string(),
-  isActive: z48.boolean(),
-  supportsRebuild: z48.boolean()
-});
-var ActiveSearchDriverSchema = z48.object({
-  driverName: z48.string(),
-  pluginName: z48.string(),
-  supportsRebuild: z48.boolean()
-});
-var GetSearchStatusResponseSchema = z48.object({
+import { z as z49 } from "@hono/zod-openapi";
+var SearchDriverEntrySchema = z49.object({
+  driverName: z49.string(),
+  pluginName: z49.string(),
+  isActive: z49.boolean(),
+  supportsRebuild: z49.boolean()
+});
+var ActiveSearchDriverSchema = z49.object({
+  driverName: z49.string(),
+  pluginName: z49.string(),
+  supportsRebuild: z49.boolean()
+});
+var GetSearchStatusResponseSchema = z49.object({
   active: ActiveSearchDriverSchema.nullable(),
-  drivers: z48.array(SearchDriverEntrySchema)
+  drivers: z49.array(SearchDriverEntrySchema)
 });
 
 // src/contracts/admin/search.ts
@@ -5200,11 +5303,11 @@ var adminSearchRoutes = {
 import { createRoute as createRoute31 } from "@hono/zod-openapi";
 
 // src/schemas/admin/security.ts
-import { z as z49 } from "@hono/zod-openapi";
-var RegistrationModeSchema = z49.enum(["Open", "Resricted", "Closed"]);
-var SecuritySettingsSchema = z49.object({
+import { z as z50 } from "@hono/zod-openapi";
+var RegistrationModeSchema = z50.enum(["Open", "Resricted", "Closed"]);
+var SecuritySettingsSchema = z50.object({
   registrationMode: RegistrationModeSchema,
-  registrationWhiteList: z49.array(z49.string())
+  registrationWhiteList: z50.array(z50.string())
 });
 var UpdateSecuritySettingsRequestSchema = SecuritySettingsSchema;
 var GetSecuritySettingsResponseSchema = SecuritySettingsSchema;
@@ -5275,19 +5378,19 @@ var adminSecurityRoutes = {
 import { createRoute as createRoute32 } from "@hono/zod-openapi";
 
 // src/schemas/admin/storage.ts
-import { z as z50 } from "@hono/zod-openapi";
-var StorageDriverEntrySchema = z50.object({
-  driverName: z50.string(),
-  pluginName: z50.string(),
-  isActive: z50.boolean()
+import { z as z51 } from "@hono/zod-openapi";
+var StorageDriverEntrySchema = z51.object({
+  driverName: z51.string(),
+  pluginName: z51.string(),
+  isActive: z51.boolean()
 });
-var ActiveStorageDriverSchema = z50.object({
-  driverName: z50.string(),
-  pluginName: z50.string()
+var ActiveStorageDriverSchema = z51.object({
+  driverName: z51.string(),
+  pluginName: z51.string()
 });
-var GetStorageStatusResponseSchema = z50.object({
+var GetStorageStatusResponseSchema = z51.object({
   active: ActiveStorageDriverSchema.nullable(),
-  drivers: z50.array(StorageDriverEntrySchema)
+  drivers: z51.array(StorageDriverEntrySchema)
 });
 
 // src/contracts/admin/storage.ts
@@ -5324,87 +5427,87 @@ var adminStorageRoutes = {
 import { createRoute as createRoute33 } from "@hono/zod-openapi";
 
 // src/schemas/admin/users.ts
-import { z as z52 } from "@hono/zod-openapi";
+import { z as z53 } from "@hono/zod-openapi";
 
 // src/schemas/admin/_pager.ts
-import { z as z51 } from "@hono/zod-openapi";
-var AdminPagerSchema = z51.object({
-  page: z51.number(),
-  pagesCount: z51.number(),
-  pages: z51.array(z51.number()),
-  total: z51.number(),
-  previous: z51.number().nullable(),
-  previousDots: z51.boolean(),
-  next: z51.number().nullable(),
-  nextDots: z51.boolean()
+import { z as z52 } from "@hono/zod-openapi";
+var AdminPagerSchema = z52.object({
+  page: z52.number(),
+  pagesCount: z52.number(),
+  pages: z52.array(z52.number()),
+  total: z52.number(),
+  previous: z52.number().nullable(),
+  previousDots: z52.boolean(),
+  next: z52.number().nullable(),
+  nextDots: z52.boolean()
 });
 
 // src/schemas/admin/users.ts
-var ListAdminUsersRequestSchema = z52.object({
-  q: z52.string().optional(),
+var ListAdminUsersRequestSchema = z53.object({
+  q: z53.string().optional(),
   /**
    * Optional numeric user-status filter (see `UserStatusEnum`). When set, only
    * users in that status are returned — used by the "user approval" queue
    * screen to list `REGISTERED` (= awaiting admin approval) users.
    */
-  status: z52.coerce.number().int().optional(),
-  page: z52.coerce.number().int().min(1).optional().default(1),
-  limit: z52.coerce.number().int().min(1).max(100).optional().default(50)
+  status: z53.coerce.number().int().optional(),
+  page: z53.coerce.number().int().min(1).optional().default(1),
+  limit: z53.coerce.number().int().min(1).max(100).optional().default(50)
 });
-var ListAdminUsersResponseSchema = z52.object({
-  users: z52.array(UserPublicSchema),
+var ListAdminUsersResponseSchema = z53.object({
+  users: z53.array(UserPublicSchema),
   pager: AdminPagerSchema
 });
-var SearchAdminUsersByEmailRequestSchema = z52.object({
-  email: z52.string().min(1)
+var SearchAdminUsersByEmailRequestSchema = z53.object({
+  email: z53.string().min(1)
 });
-var SearchAdminUsersByEmailResponseSchema = z52.object({
-  users: z52.array(UserPublicSchema)
+var SearchAdminUsersByEmailResponseSchema = z53.object({
+  users: z53.array(UserPublicSchema)
 });
-var AdminUserIdParamSchema = z52.object({
-  id: z52.string()
+var AdminUserIdParamSchema = z53.object({
+  id: z53.string()
 });
-var InviteUsersRequestSchema = z52.object({
-  emailList: z52.array(z52.string().email()).min(1),
-  sendEmail: z52.boolean().optional().default(false)
+var InviteUsersRequestSchema = z53.object({
+  emailList: z53.array(z53.string().email()).min(1),
+  sendEmail: z53.boolean().optional().default(false)
 });
-var InvitedUserResultSchema = z52.discriminatedUnion("status", [
-  z52.object({
-    email: z52.string(),
-    status: z52.literal("created"),
-    userId: z52.string()
+var InvitedUserResultSchema = z53.discriminatedUnion("status", [
+  z53.object({
+    email: z53.string(),
+    status: z53.literal("created"),
+    userId: z53.string()
   }),
-  z52.object({
-    email: z52.string(),
-    status: z52.literal("exists")
+  z53.object({
+    email: z53.string(),
+    status: z53.literal("exists")
   }),
-  z52.object({
-    email: z52.string(),
-    status: z52.literal("failed")
+  z53.object({
+    email: z53.string(),
+    status: z53.literal("failed")
   })
 ]);
-var InviteUsersResponseSchema = z52.object({
-  results: z52.array(InvitedUserResultSchema)
+var InviteUsersResponseSchema = z53.object({
+  results: z53.array(InvitedUserResultSchema)
 });
-var EditAdminUserRequestSchema = z52.object({
-  name: z52.string().min(1),
-  email: z52.string().email()
+var EditAdminUserRequestSchema = z53.object({
+  name: z53.string().min(1),
+  email: z53.string().email()
 });
-var AdminUserMutationResponseSchema = z52.object({
+var AdminUserMutationResponseSchema = z53.object({
   user: UserPublicSchema
 });
-var ResetPasswordResponseSchema = z52.object({
+var ResetPasswordResponseSchema = z53.object({
   user: UserPublicSchema,
-  newPassword: z52.string()
+  newPassword: z53.string()
 });
-var UpdateAdminUserEmailRequestSchema = z52.object({
-  email: z52.string().email()
+var UpdateAdminUserEmailRequestSchema = z53.object({
+  email: z53.string().email()
 });
-var DeleteAdminUserResponseSchema = z52.object({
-  deletedId: z52.string()
+var DeleteAdminUserResponseSchema = z53.object({
+  deletedId: z53.string()
 });
-var PendingUsersCountResponseSchema = z52.object({
-  count: z52.number().int().nonnegative()
+var PendingUsersCountResponseSchema = z53.object({
+  count: z53.number().int().nonnegative()
 });
 
 // src/contracts/admin/users.ts
@@ -6166,7 +6269,7 @@ var appAuthMeUserChain = new OpenAPIHono().openapi(
   )
 ).openapi(meRoutes.getProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateProfileRoute, (c) => c.json(stubProfile, 200)).openapi(meRoutes.updateThemeRoute, (c) => c.json({ status: "ok", theme: "system" }, 200)).openapi(meRoutes.uploadPictureRoute, (c) => c.json({ status: true }, 200)).openapi(meRoutes.deletePictureRoute, (c) => c.json({ status: "ok" }, 200)).openapi(meRoutes.updatePasswordRoute, (c) => c.json({ status: "ok", message: "" }, 200)).openapi(meRoutes.recentlyViewedPagesRoute, (c) => c.json({ pages: [] }, 200)).openapi(accessTokenRoutes.listAccessTokensRoute, (c) => c.json({ accessTokens: [] }, 200)).openapi(accessTokenRoutes.createAccessTokenRoute, (c) => c.json(stubCreateAccessToken, 201)).openapi(accessTokenRoutes.deleteAccessTokenRoute, (c) => c.json(stubAccessToken, 200)).openapi(userRoutes.getUserPageRoute, (c) => c.json(stubUserPage, 200)).openapi(userRoutes.getUserBookmarksRoute, (c) => c.json(stubUserBookmarks, 200)).openapi(userRoutes.getUserPagesRoute, (c) => c.json(stubUserPages, 200)).openapi(userRoutes.listMembersRoute, (c) => c.json(stubListUsers, 200));
 var bookmarkBacklinkCommentRevisionChain = new OpenAPIHono().openapi(bookmarkRoutes.getBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.listMyBookmarksRoute, (c) => c.json(stubListMyBookmarks, 200)).openapi(bookmarkRoutes.addBookmarkRoute, (c) => c.json(stubBookmarkResponse, 200)).openapi(bookmarkRoutes.removeBookmarkRoute, (c) => c.json(stubRemoveBookmark, 200)).openapi(backlinkRoutes.getBacklinksRoute, (c) => c.json(stubBacklinks, 200)).openapi(commentRoutes.listCommentsRoute, (c) => c.json(stubListComments, 200)).openapi(commentRoutes.addCommentRoute, (c) => c.json(stubAddComment, 200)).openapi(commentRoutes.deleteCommentRoute, (c) => c.json(stubDeleteComment, 200)).openapi(revisionRoutes.listRevisionsRoute, (c) => c.json(stubListRevisions, 200)).openapi(revisionRoutes.getRevisionsRoute, (c) => c.json(stubGetRevisions, 200)).openapi(revisionRoutes.getRevisionRoute, (c) => c.json(stubGetRevision, 200));
-var pageChain = new OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
+var pageChain = new OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.claimPageLinkAccessRoute, (c) => c.json({ ...stubPageWithRevision, granted: false }, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
 var lateContractApp = new OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
 var adminSettingsContractApp = new OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
 var adminUsersPluginsContractApp = new OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
@@ -6176,42 +6279,26 @@ var createClient = (baseUrl, options = {}) => hc(baseUrl, {
   fetch: options.fetch
 });
 
-// src/schemas/app-capabilities.ts
-var STATIC_CAPABILITIES = [
-  "oauth",
-  // The oauth:* tags mirror GRANT_TYPES_SUPPORTED + the S256 PKCE method
-  // (schemas/oauth-endpoints.ts / the RFC 8414 discovery doc). Keep in sync.
-  "oauth:auth-code",
-  "oauth:device",
-  "oauth:pkce",
-  "pat",
-  "pages",
-  "comments",
-  "bookmarks",
-  "attachments",
-  "notifications"
-];
-var API_SURFACE_VERSION = "v2";
-
 // src/schemas/mail-token.ts
-import { z as z54 } from "@hono/zod-openapi";
-var MailTokenPurposeSchema = z54.enum(["invite", "activate", "reset", "email-change"]);
-var MailTokenPayloadSchema = z54.object({
+import { z as z55 } from "@hono/zod-openapi";
+var MailTokenPurposeSchema = z55.enum(["invite", "activate", "reset", "email-change"]);
+var MailTokenPayloadSchema = z55.object({
   purpose: MailTokenPurposeSchema,
-  userId: z54.string(),
+  userId: z55.string(),
   /** Target address. For `email-change` this is the NEW address. */
-  email: z54.string().email(),
+  email: z55.string().email(),
   /**
    * For `email-change`: the account's email at issue time. The confirm
    * endpoint rejects the token unless it still matches, making the token
    * single-use (a stale token cannot revert a later change).
    */
-  fromEmail: z54.string().email().optional(),
+  fromEmail: z55.string().email().optional(),
   // iat / exp are injected and verified by the JWT layer.
-  iat: z54.number().optional(),
-  exp: z54.number().optional()
+  iat: z55.number().optional(),
+  exp: z55.number().optional()
 });
 export {
+  ALL_CAPABILITIES,
   ALL_SCOPES,
   API_SURFACE_VERSION,
   AccessTokenSchema,
@@ -6250,6 +6337,8 @@ export {
   BacklinkSchema,
   BookmarkResponseSchema,
   BookmarkSchema,
+  CapabilitySchema,
+  ClaimPageLinkAccessResponseSchema,
   ClearRenderCacheResponseSchema,
   CollabForceReloadMessageSchema,
   CollabSaveErrorSchema,
@@ -6273,6 +6362,7 @@ export {
   DEVICE_CODE_GRANT_TYPE,
   DISCOVERY_SCOPES_SUPPORTED,
   DND_EXTRA_UPLOAD_MIME,
+  DYNAMIC_CAPABILITIES,
   DeleteAdminUserResponseSchema,
   DeleteCommentRequestSchema,
   DeleteCommentResponseSchema,
@@ -6526,6 +6616,7 @@ export {
   backlinkRoutes,
   bookmarkRoutes,
   cancelDraftRoute,
+  claimPageLinkAccessRoute,
   clearRenderCacheAllRoute,
   clearRenderCachePluginRoute,
   commentRoutes,