@mestra-dev/contract 0.0.27 → 0.0.29

package/dist/index.d.ts

@@ -94,7 +94,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 					},
 					{
 						readonly name: "Files";
-						readonly description: "S3 file upload (presigned POST), profile and workspace picture upload/confirm/delete, comment attachment upload, list task comment files with download URLs, folder create/delete, list (includes pin metadata), pin/unpin, download, and file delete. General uploads accept JPEG/PNG/WebP/PDF; profile/workspace pictures accept JPEG/PNG only (0.5 MB).";
+						readonly description: "S3 file upload (presigned POST to a temporary `.tmp` key), confirm (magic-byte validation then promote to final key), profile and workspace picture upload/confirm/delete, comment attachment upload/confirm, list task comment files with download URLs, folder create/delete, list (includes pin metadata; excludes `.tmp` objects), pin/unpin, download, and file delete. General uploads accept JPEG/PNG/WebP/PDF; profile/workspace pictures accept JPEG/PNG only (0.5 MB). Workspace file routes require active collaborator status and crm::files access; comment attachments require crm::tasks write/read.";
 					},
 					{
 						readonly name: "Chat";
@@ -1409,7 +1409,9 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							readonly properties: {
 								readonly filename: {
 									readonly type: "string";
-									readonly description: "Original file name (trimmed).";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Safe file name (no path separators, not `.tmp`).";
 									readonly example: "invoice-2026.pdf";
 								};
 								readonly contentType: {
@@ -1422,6 +1424,45 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 							};
 						};
+						readonly ConfirmFileRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"workspace"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Original file name used for `/files/upload` (without the `.tmp` suffix).";
+									readonly example: "invoice-2026.pdf";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+							};
+						};
+						readonly ConfirmFileSuccess: {
+							readonly type: "object";
+							readonly required: readonly [
+								"success",
+								"key"
+							];
+							readonly properties: {
+								readonly success: {
+									readonly type: "boolean";
+									readonly const: true;
+								};
+								readonly key: {
+									readonly type: "string";
+									readonly description: "Final S3 object key after promotion (`{workspace}/{filename}`).";
+									readonly example: "550e8400-e29b-41d4-a716-446655440000/invoice-2026.pdf";
+								};
+							};
+						};
 						readonly PresignedUploadSuccess: {
 							readonly type: "object";
 							readonly required: readonly [
@@ -1444,8 +1485,8 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 								readonly key: {
 									readonly type: "string";
-									readonly description: "S3 object key where the file will be stored (`{workspace}/{filename}`).";
-									readonly example: "550e8400-e29b-41d4-a716-446655440000/invoice-2026.pdf";
+									readonly description: "Temporary S3 object key (`{workspace}/{filename}.tmp`). Call `/files/confirm` after upload.";
+									readonly example: "550e8400-e29b-41d4-a716-446655440000/invoice-2026.pdf.tmp";
 								};
 								readonly maxSize: {
 									readonly type: "integer";
@@ -1466,7 +1507,9 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							readonly properties: {
 								readonly filename: {
 									readonly type: "string";
-									readonly description: "Original file name (trimmed).";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Safe file name (no path separators, not `.tmp`).";
 									readonly example: "receipt.pdf";
 								};
 								readonly contentType: {
@@ -1516,8 +1559,8 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 								readonly key: {
 									readonly type: "string";
-									readonly description: "S3 object key (`{workspace}_comments/{taskId}/{commentId}/{filename}`).";
-									readonly example: "550e8400-e29b-41d4-a716-446655440000_comments/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/ffffffff-1111-2222-3333-444444444444/receipt.pdf";
+									readonly description: "Temporary S3 object key (`{workspace}_comments/{taskId}/{commentId}/{filename}.tmp`). Call `/files/confirm-comment-file` after upload.";
+									readonly example: "550e8400-e29b-41d4-a716-446655440000_comments/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/ffffffff-1111-2222-3333-444444444444/receipt.pdf.tmp";
 								};
 								readonly maxSize: {
 									readonly type: "integer";
@@ -1526,6 +1569,72 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 							};
 						};
+						readonly ConfirmCommentFileRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"workspace",
+								"taskId",
+								"commentId"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Original file name used for `/files/upload-to-comment` (without the `.tmp` suffix).";
+									readonly example: "receipt.pdf";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+								readonly taskId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Task the comment belongs to.";
+								};
+								readonly commentId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Comment the file is attached to.";
+								};
+							};
+						};
+						readonly DeleteCommentFileRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"workspace",
+								"taskId",
+								"commentId"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Safe file name (no path separators, not `.tmp`).";
+									readonly example: "receipt.pdf";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+								readonly taskId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Task the comment belongs to.";
+								};
+								readonly commentId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Comment the file is attached to.";
+								};
+							};
+						};
 						readonly TaskCommentFile: {
 							readonly type: "object";
 							readonly required: readonly [
@@ -9660,7 +9769,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Files"
 							];
 							readonly summary: "Create presigned S3 upload";
-							readonly description: "Returns a presigned POST URL and form fields for uploading a file to S3 (max 15 MB, 5-minute expiry). Object key is `{workspace}/{filename}`. Only JPEG, PNG, WebP, and PDF content types are accepted. Requires workspace access.";
+							readonly description: "Returns a presigned POST URL and form fields for uploading a file to S3 (max 15 MB, 5-minute expiry). Object key is `{workspace}/{filename}.tmp`. Only JPEG, PNG, WebP, and PDF content types are accepted. After the multipart upload succeeds, call `/files/confirm` to validate magic bytes and promote the object to `{workspace}/{filename}`. Temporary objects are excluded from list results. Requires active workspace access and write access to crm::files.";
 							readonly security: readonly [
 								never
 							];
@@ -9728,6 +9837,80 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 						};
 					};
+					readonly "/files/confirm": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Confirm and promote a temporary upload";
+							readonly description: "Reads the temporary object at `{workspace}/{filename}.tmp`, verifies size (<= 15 MB) and real file type (JPEG, PNG, WebP, or PDF), copies it to `{workspace}/{filename}`, and deletes the temporary object. On failure, the temporary object is deleted. Requires workspace access.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/ConfirmFileRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "File confirmed and promoted successfully.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ConfirmFileSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Temporary object missing, file too large, invalid file type, or processing failed.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access' or user lacks workspace access.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 404: {
+									readonly description: "Workspace not found.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
 					readonly "/files/create-folder": {
 						readonly post: {
 							readonly tags: readonly [
@@ -9882,7 +10065,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Files"
 							];
 							readonly summary: "List workspace files";
-							readonly description: "Lists up to 50 S3 objects under the workspace prefix. Each item includes `pin` from S3 object user metadata. Requires workspace access.";
+							readonly description: "Lists up to 50 S3 objects under the workspace prefix. Temporary uploads ending in `.tmp` are excluded. Each item includes `pin` from S3 object user metadata. Requires workspace access.";
 							readonly security: readonly [
 								never
 							];
@@ -10201,7 +10384,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Files"
 							];
 							readonly summary: "Create presigned upload for a comment attachment";
-							readonly description: "Returns a presigned POST URL and form fields for uploading a file attached to a task comment. Object key is `{workspace}_comments/{taskId}/{commentId}/{filename}` (max 15 MB, 5-minute expiry). Accepts JPEG, PNG, WebP, and PDF. Requires workspace access and write access to crm::tasks.";
+							readonly description: "Returns a presigned POST URL and form fields for uploading a file attached to a task comment. Object key is `{workspace}_comments/{taskId}/{commentId}/{filename}.tmp` (max 15 MB, 5-minute expiry). Accepts JPEG, PNG, WebP, and PDF. After upload, call `/files/confirm-comment-file` to validate magic bytes and promote the object. Verifies the task and comment belong to the workspace. Requires active workspace access and write access to crm::tasks.";
 							readonly security: readonly [
 								never
 							];
@@ -10257,7 +10440,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 									};
 								};
 								readonly 404: {
-									readonly description: "Workspace not found.";
+									readonly description: "Workspace, task, or comment not found.";
 									readonly content: {
 										readonly "application/json": {
 											readonly schema: {
@@ -10269,6 +10452,164 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 						};
 					};
+					readonly "/files/confirm-comment-file": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Confirm a comment attachment upload";
+							readonly description: "Reads the temporary object at `{workspace}_comments/{taskId}/{commentId}/{filename}.tmp`, verifies size (<= 15 MB) and real file type (JPEG, PNG, WebP, or PDF), promotes it to `{workspace}_comments/{taskId}/{commentId}/{filename}`, and deletes the temporary object. Verifies the task and comment belong to the workspace. Requires active workspace access and write access to crm::tasks.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/ConfirmCommentFileRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "Comment file confirmed and promoted.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ConfirmFileSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Invalid request payload, missing temp object, oversized file, or invalid file type.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access', invite not accepted, user lacks workspace access, or user lacks write access to crm::tasks.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 404: {
+									readonly description: "Workspace, task, or comment not found.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
+					readonly "/files/delete-comment-file": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Delete a comment attachment";
+							readonly description: "Deletes the S3 object at `{workspace}_comments/{taskId}/{commentId}/{filename}`. Verifies the object exists before deletion and confirms removal afterward. Requires workspace access and write access to crm::tasks.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/DeleteCommentFileRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "Comment file deleted successfully.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Invalid request payload.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access', user lacks workspace access, or user lacks write access to crm::tasks.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 404: {
+									readonly description: "File not found at the given comment attachment key.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileFailure";
+											};
+										};
+									};
+								};
+								readonly 500: {
+									readonly description: "Delete command ran but the object still exists.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileFailure";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
 					readonly "/files/download-from-task/{workspace}/{taskId}": {
 						readonly get: {
 							readonly tags: readonly [
@@ -10430,7 +10771,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Files"
 							];
 							readonly summary: "Confirm and persist an uploaded profile picture";
-							readonly description: "Reads the temporary object at `profiles/clients/{userId}/temp`, verifies size (<= 0.5 MB) and real image type (JPEG, PNG, or WebP), resizes it to a 512x512 WebP avatar (cover fit, without enlargement, input pixel limit 4096x4096), stores it privately at `profiles/clients/{userId}/avatar.webp`, deletes the temporary object, creates a 7-day presigned GET URL for the avatar, and saves that URL on the user profile. On failure, the temporary object is deleted and the profile picture is cleared.";
+							readonly description: "Reads the temporary object at `profiles/clients/{userId}/temp`, verifies size (<= 0.5 MB) and real image type (JPEG, PNG, or WebP), resizes it to a 512x512 WebP avatar (cover fit, without enlargement, input pixel limit 4096x4096), stores it privately at `profiles/clients/{userId}/avatar.webp`, deletes the temporary object, creates a 7-day presigned GET URL for the avatar, and saves that URL on the user profile. On failure, the temporary object is deleted; the existing profile picture is left unchanged.";
 							readonly security: readonly [
 								never
 							];
@@ -10617,7 +10958,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								"Files"
 							];
 							readonly summary: "Confirm and persist an uploaded workspace picture";
-							readonly description: "Reads the temporary object at `profiles/workspaces/{workspace}/temp`, verifies size (<= 0.5 MB) and real image type (JPEG, PNG, or WebP), resizes it to a 512x512 WebP avatar (cover fit, without enlargement, input pixel limit 4096x4096), stores it privately at `profiles/workspaces/{workspace}/avatar.webp`, deletes the temporary object, creates a 7-day presigned GET URL for the avatar, and saves that URL on the workspace. On failure, the temporary object is deleted and the workspace picture is cleared. Requires workspace access and write access to crm::general.";
+							readonly description: "Reads the temporary object at `profiles/workspaces/{workspace}/temp`, verifies size (<= 0.5 MB) and real image type (JPEG, PNG, or WebP), resizes it to a 512x512 WebP avatar (cover fit, without enlargement, input pixel limit 4096x4096), stores it privately at `profiles/workspaces/{workspace}/avatar.webp`, deletes the temporary object, creates a 7-day presigned GET URL for the avatar, and saves that URL on the workspace. On failure, the temporary object is deleted; the existing workspace picture is left unchanged. Requires workspace access and write access to crm::general.";
 							readonly security: readonly [
 								never
 							];
@@ -16456,6 +16797,26 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			status: import("hono/utils/http-status").ContentfulStatusCode;
 		};
 	};
+} & {
+	"/confirm": {
+		$post: {
+			input: {};
+			output: {
+				success: true;
+				key: string;
+			};
+			outputFormat: "json";
+			status: import("hono/utils/http-status").ContentfulStatusCode;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 400;
+		};
+	};
 } & {
 	"/create-folder": {
 		$post: {
@@ -16522,6 +16883,20 @@ declare const routes: import("hono/hono-base").HonoBase<{
 } & {
 	"/download/:workspace/:fileKey": {
 		$get: {
+			input: {
+				param: {
+					workspace: string;
+				} & {
+					fileKey: string;
+				};
+			};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 400;
+		} | {
 			input: {
 				param: {
 					workspace: string;
@@ -16607,6 +16982,14 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			};
 			outputFormat: "json";
 			status: 400;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 404;
 		} | {
 			input: {};
 			output: {
@@ -16622,9 +17005,98 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			status: import("hono/utils/http-status").ContentfulStatusCode;
 		};
 	};
+} & {
+	"/confirm-comment-file": {
+		$post: {
+			input: {};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 404;
+		} | {
+			input: {};
+			output: {
+				success: true;
+				key: string;
+			};
+			outputFormat: "json";
+			status: import("hono/utils/http-status").ContentfulStatusCode;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 400;
+		};
+	};
+} & {
+	"/delete-comment-file": {
+		$post: {
+			input: {};
+			output: {
+				success: false;
+				error: never;
+			};
+			outputFormat: "json";
+			status: 400;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 404;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				message: string;
+				key: string;
+			};
+			outputFormat: "json";
+			status: 404;
+		} | {
+			input: {};
+			output: {
+				success: false;
+				message: string;
+				key: string;
+			};
+			outputFormat: "json";
+			status: 500;
+		} | {
+			input: {};
+			output: {
+				success: true;
+				message: string;
+				key: string;
+			};
+			outputFormat: "json";
+			status: import("hono/utils/http-status").ContentfulStatusCode;
+		};
+	};
 } & {
 	"/download-from-task/:workspace/:taskId": {
 		$get: {
+			input: {
+				param: {
+					workspace: string;
+				} & {
+					taskId: string;
+				};
+			};
+			output: {
+				success: false;
+				error: string;
+			};
+			outputFormat: "json";
+			status: 404;
+		} | {
 			input: {
 				param: {
 					workspace: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mestra-dev/contract",
-  "version": "0.0.27",
+  "version": "0.0.29",
   "description": "Types-only Hono AppType contract for the Mestra auth API",
   "type": "module",
   "sideEffects": false,