@mestra-dev/contract 0.0.87 → 0.0.88

package/dist/index.d.ts

@@ -1751,6 +1751,135 @@ declare const routes: import("hono/hono-base").HonoBase<{
 								};
 							};
 						};
+						readonly UploadToServiceRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"contentType",
+								"contentLength",
+								"workspace",
+								"serviceId"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Safe file name (no path separators, not `.tmp`).";
+									readonly example: "floor-plan.pdf";
+								};
+								readonly contentType: {
+									readonly $ref: "#/components/schemas/FileContentType";
+								};
+								readonly contentLength: {
+									readonly type: "integer";
+									readonly minimum: 1;
+									readonly maximum: 15728640;
+									readonly description: "Exact file byte length. The S3 upload policy rejects a different size.";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+								readonly serviceId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Service the file is attached to.";
+								};
+							};
+						};
+						readonly UploadToServiceSuccess: {
+							readonly type: "object";
+							readonly required: readonly [
+								"success",
+								"url",
+								"fields",
+								"key",
+								"maxSize"
+							];
+							readonly properties: {
+								readonly success: {
+									readonly type: "boolean";
+									readonly const: true;
+								};
+								readonly url: {
+									readonly type: "string";
+									readonly description: "S3 presigned POST URL.";
+								};
+								readonly fields: {
+									readonly type: "object";
+									readonly additionalProperties: {
+										readonly type: "string";
+									};
+									readonly description: "Form fields to include in the multipart upload POST.";
+								};
+								readonly key: {
+									readonly type: "string";
+									readonly description: "Temporary S3 object key (`{workspace}_services/{serviceId}/{filename}.tmp`). Call `/files/confirm-service-file` after upload.";
+									readonly example: "550e8400-e29b-41d4-a716-446655440000_services/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/floor-plan.pdf.tmp";
+								};
+								readonly maxSize: {
+									readonly type: "integer";
+									readonly description: "Exact requested upload size in bytes; it cannot exceed 15 MB.";
+									readonly example: 15728640;
+								};
+							};
+						};
+						readonly ConfirmServiceFileRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"workspace",
+								"serviceId"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Original file name used for `/files/upload-to-service` (without the `.tmp` suffix).";
+									readonly example: "floor-plan.pdf";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+								readonly serviceId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Service the file is attached to.";
+								};
+							};
+						};
+						readonly DeleteServiceFileRequest: {
+							readonly type: "object";
+							readonly required: readonly [
+								"filename",
+								"workspace",
+								"serviceId"
+							];
+							readonly properties: {
+								readonly filename: {
+									readonly type: "string";
+									readonly minLength: 1;
+									readonly maxLength: 200;
+									readonly description: "Safe file name (no path separators, not `.tmp`).";
+									readonly example: "floor-plan.pdf";
+								};
+								readonly workspace: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Workspace identifier.";
+								};
+								readonly serviceId: {
+									readonly type: "string";
+									readonly format: "uuid";
+									readonly description: "Service the file is attached to.";
+								};
+							};
+						};
 						readonly TaskCommentFile: {
 							readonly type: "object";
 							readonly required: readonly [
@@ -12360,6 +12489,228 @@ declare const routes: import("hono/hono-base").HonoBase<{
 							};
 						};
 					};
+					readonly "/files/upload-to-service": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Create presigned upload for a service file";
+							readonly description: "Returns a presigned POST URL and form fields for uploading a file attached to a CRM service. Object key is `{workspace}_services/{serviceId}/{filename}.tmp` (max 15 MB, 5-minute expiry). Accepts JPEG, PNG, WebP, and PDF. After upload, call `/files/confirm-service-file` to validate magic bytes and promote the object. Currently supported for real-estate workspaces; verifies the service belongs to the workspace. Requires active workspace access, write access to crm::services, and an active billing grant.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/UploadToServiceRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "Presigned service upload created.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/UploadToServiceSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Invalid request payload, unsupported content type, or unsupported workspace category.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access', user lacks workspace access, user lacks write access to crm::services, or billing access is missing.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 404: {
+									readonly description: "Workspace or real-estate service not found.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
+					readonly "/files/confirm-service-file": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Confirm a service file upload";
+							readonly description: "Reads the temporary object at `{workspace}_services/{serviceId}/{filename}.tmp`, verifies size (<= 15 MB) and real file type (JPEG, PNG, WebP, or PDF), promotes it to `{workspace}_services/{serviceId}/{filename}`, and deletes the temporary object. Confirmed bytes count toward workspace storage usage (`servicesBytes`). Requires active workspace access, write access to crm::services, and an active billing grant.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/ConfirmServiceFileRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "Service file confirmed and promoted.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ConfirmFileSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Invalid request payload, missing temp object, oversized file, or invalid file type.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access', invite not accepted, user lacks workspace access, user lacks write access to crm::services, or billing access is missing.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
+					readonly "/files/delete-service-file": {
+						readonly post: {
+							readonly tags: readonly [
+								"Files"
+							];
+							readonly summary: "Delete a service file";
+							readonly description: "Deletes the S3 object at `{workspace}_services/{serviceId}/{filename}`. Verifies the object exists before deletion and confirms removal afterward. Requires workspace access, write access to crm::services, and an active billing grant.";
+							readonly security: readonly [
+								never
+							];
+							readonly requestBody: {
+								readonly required: true;
+								readonly content: {
+									readonly "application/json": {
+										readonly schema: {
+											readonly $ref: "#/components/schemas/DeleteServiceFileRequest";
+										};
+									};
+								};
+							};
+							readonly responses: {
+								readonly 200: {
+									readonly description: "Service file deleted successfully.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileSuccess";
+											};
+										};
+									};
+								};
+								readonly 400: {
+									readonly description: "Invalid request payload.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 401: {
+									readonly description: "Unauthorized - Missing or invalid access token.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 403: {
+									readonly description: "Forbidden - Token issuer is not 'access', user lacks workspace access, user lacks write access to crm::services, or billing access is missing.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/ErrorResponse";
+											};
+										};
+									};
+								};
+								readonly 404: {
+									readonly description: "File not found at the given service file key.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileFailure";
+											};
+										};
+									};
+								};
+								readonly 500: {
+									readonly description: "Delete command ran but the object still exists.";
+									readonly content: {
+										readonly "application/json": {
+											readonly schema: {
+												readonly $ref: "#/components/schemas/DeleteFileFailure";
+											};
+										};
+									};
+								};
+							};
+						};
+					};
 					readonly "/files/delete-comment-file": {
 						readonly post: {
 							readonly tags: readonly [
@@ -19573,10 +19924,10 @@ declare const routes: import("hono/hono-base").HonoBase<{
 			input: {};
 			output: {
 				success: false;
-				error: never;
+				error: string;
 			};
 			outputFormat: "json";
-			status: 400;
+			status: 404;
 		} | {
 			input: {};
 			output: {
@@ -19584,7 +19935,7 @@ declare const routes: import("hono/hono-base").HonoBase<{
 				error: string;
 			};
 			outputFormat: "json";
-			status: 404;
+			status: 400;
 		} | {
 			input: {};
 			output: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mestra-dev/contract",
-  "version": "0.0.87",
+  "version": "0.0.88",
   "description": "Types-only Hono AppType contract for the Mestra auth API",
   "type": "module",
   "sideEffects": false,