@mestra-dev/contract 0.0.27 → 0.0.28

package/dist/index.d.ts

@@ -94,7 +94,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 					},
 					{
 						readonly name: "Files";
-						readonly description: "S3 file upload (presigned POST), profile and workspace picture upload/confirm/delete, comment attachment upload, list task comment files with download URLs, folder create/delete, list (includes pin metadata), pin/unpin, download, and file delete. General uploads accept JPEG/PNG/WebP/PDF; profile/workspace pictures accept JPEG/PNG only (0.5 MB).";
+						readonly description: "S3 file upload (presigned POST to a temporary `.tmp` key), confirm (magic-byte validation then promote to final key), profile and workspace picture upload/confirm/delete, comment attachment upload, list task comment files with download URLs, folder create/delete, list (includes pin metadata; excludes `.tmp` objects), pin/unpin, download, and file delete. General uploads accept JPEG/PNG/WebP/PDF; profile/workspace pictures accept JPEG/PNG only (0.5 MB).";
 					},
 					{
 						readonly name: "Chat";
@@ -1422,6 +1422,43 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 							};
 						};
+						readonly ConfirmFileRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"workspace"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly description: "Original file name used for `/files/upload` (without the `.tmp` suffix).";
+									readonly example: "invoice-2026.pdf";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+							};
+						};
+						readonly ConfirmFileSuccess: {
+							readonly type: "object";
+							readonly required: readonly [
+								"success",
+								"key"
+							];
+							readonly properties: {
+								readonly success: {
+									readonly type: "boolean";
+									readonly const: true;
+								};
+								readonly key: {
+									readonly type: "string";
+									readonly description: "Final S3 object key after promotion (`{workspace}/{filename}`).";
+									readonly example: "550e8400-e29b-41d4-a716-446655440000/invoice-2026.pdf";
+								};
+							};
+						};
 						readonly PresignedUploadSuccess: {
 							readonly type: "object";
 							readonly required: readonly [
@@ -1444,8 +1481,8 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 								readonly key: {
 									readonly type: "string";
-									readonly description: "S3 object key where the file will be stored (`{workspace}/{filename}`).";
-									readonly example: "550e8400-e29b-41d4-a716-446655440000/invoice-2026.pdf";
+									readonly description: "Temporary S3 object key (`{workspace}/{filename}.tmp`). Call `/files/confirm` after upload.";
+									readonly example: "550e8400-e29b-41d4-a716-446655440000/invoice-2026.pdf.tmp";
 								};
 								readonly maxSize: {
 									readonly type: "integer";
@@ -1526,6 +1563,37 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 							};
 						};
+						readonly DeleteCommentFileRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"workspace",
+								"taskId",
+								"commentId"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly description: "Original file name (trimmed).";
+									readonly example: "receipt.pdf";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+								readonly taskId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Task the comment belongs to.";
+								};
+								readonly commentId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Comment the file is attached to.";
+								};
+							};
+						};
 						readonly TaskCommentFile: {
 							readonly type: "object";
 							readonly required: readonly [
@@ -9660,7 +9728,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Files"
 							];
 							readonly summary: "Create presigned S3 upload";
-							readonly description: "Returns a presigned POST URL and form fields for uploading a file to S3 (max 15 MB, 5-minute expiry). Object key is `{workspace}/{filename}`. Only JPEG, PNG, WebP, and PDF content types are accepted. Requires workspace access.";
+							readonly description: "Returns a presigned POST URL and form fields for uploading a file to S3 (max 15 MB, 5-minute expiry). Object key is `{workspace}/{filename}.tmp`. Only JPEG, PNG, WebP, and PDF content types are accepted. After the multipart upload succeeds, call `/files/confirm` to validate magic bytes and promote the object to `{workspace}/{filename}`. Temporary objects are excluded from list results. Requires workspace access.";
 							readonly security: readonly [
 								never
 							];
@@ -9728,6 +9796,80 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 						};
 					};
+					readonly "/files/confirm": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Confirm and promote a temporary upload";
+							readonly description: "Reads the temporary object at `{workspace}/{filename}.tmp`, verifies size (<= 15 MB) and real file type (JPEG, PNG, WebP, or PDF), copies it to `{workspace}/{filename}`, and deletes the temporary object. On failure, the temporary object is deleted. Requires workspace access.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/ConfirmFileRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "File confirmed and promoted successfully.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ConfirmFileSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Temporary object missing, file too large, invalid file type, or processing failed.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access' or user lacks workspace access.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 404: {
+									readonly description: "Workspace not found.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
 					readonly "/files/create-folder": {
 						readonly post: {
 							readonly tags: readonly [
@@ -9882,7 +10024,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Files"
 							];
 							readonly summary: "List workspace files";
-							readonly description: "Lists up to 50 S3 objects under the workspace prefix. Each item includes `pin` from S3 object user metadata. Requires workspace access.";
+							readonly description: "Lists up to 50 S3 objects under the workspace prefix. Temporary uploads ending in `.tmp` are excluded. Each item includes `pin` from S3 object user metadata. Requires workspace access.";
 							readonly security: readonly [
 								never
 							];
@@ -10269,6 +10411,90 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 						};
 					};
+					readonly "/files/delete-comment-file": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Delete a comment attachment";
+							readonly description: "Deletes the S3 object at `{workspace}_comments/{taskId}/{commentId}/{filename}`. Verifies the object exists before deletion and confirms removal afterward. Requires workspace access and write access to crm::tasks.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/DeleteCommentFileRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "Comment file deleted successfully.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Invalid request payload.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access', user lacks workspace access, or user lacks write access to crm::tasks.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 404: {
+									readonly description: "File not found at the given comment attachment key.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileFailure";
+											};
+										};
+									};
+								};
+								readonly 500: {
+									readonly description: "Delete command ran but the object still exists.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileFailure";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
 					readonly "/files/download-from-task/{workspace}/{taskId}": {
 						readonly get: {
 							readonly tags: readonly [
@@ -16456,6 +16682,26 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			status: import("hono/utils/http-status").ContentfulStatusCode;
 		};
 	};
+} & {
+	"/confirm": {
+		$post: {
+			input: {};
+			output: {
+				success: true;
+				key: string;
+			};
+			outputFormat: "json";
+			status: import("hono/utils/http-status").ContentfulStatusCode;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 400;
+		};
+	};
 } & {
 	"/create-folder": {
 		$post: {
@@ -16622,6 +16868,45 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			status: import("hono/utils/http-status").ContentfulStatusCode;
 		};
 	};
+} & {
+	"/delete-comment-file": {
+		$post: {
+			input: {};
+			output: {
+				success: false;
+				error: never;
+			};
+			outputFormat: "json";
+			status: 400;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				message: string;
+				key: string;
+			};
+			outputFormat: "json";
+			status: 404;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				message: string;
+				key: string;
+			};
+			outputFormat: "json";
+			status: 500;
+		} | {
+			input: {};
+			output: {
+				success: true;
+				message: string;
+				key: string;
+			};
+			outputFormat: "json";
+			status: import("hono/utils/http-status").ContentfulStatusCode;
+		};
+	};
 } & {
 	"/download-from-task/:workspace/:taskId": {
 		$get: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mestra-dev/contract",
-  "version": "0.0.27",
+  "version": "0.0.28",
   "description": "Types-only Hono AppType contract for the Mestra auth API",
   "type": "module",
   "sideEffects": false,