@scrawl-board/board 0.1.0-beta.6 → 0.1.0-beta.8

package/dist/browser.d.ts

@@ -152,6 +152,21 @@ interface CustomObjectDefinition<Props extends JsonValue = JsonValue> {
     /** One pure, synchronous step per consecutive schema version. */
     migrate?: Readonly<Record<number, (oldProps: JsonValue) => JsonValue>>;
     describe(object: ReadonlyCustomObject<Props>, context: ObjectDescribeContext): BoardScene;
+    /**
+     * Optional point-level hit-test precision (Phase 8). Every custom object
+     * hit-tests against its bounding box (`fallback.bounds`) by default — this
+     * lets a non-rectangular shape (e.g. a circular card, an L-shaped region)
+     * reject a point that's inside that box but outside its actual visible
+     * silhouette, tightening a click/marquee/raycast hit to the shape's real
+     * outline. `point` is in this object's own local space — the same
+     * untransformed space `describe`'s returned geometry already lives in
+     * (the caller inverse-transforms the pointer's board point through
+     * `object.transform` before calling this). Absent means every point
+     * inside the bounding box hits, matching pre-Phase-8 behavior exactly.
+     * Rejecting a point here does not fall through to whatever's underneath —
+     * the gesture simply misses this object, same as clicking empty space.
+     */
+    hitTest?(object: ReadonlyCustomObject<Props>, point: BoardPoint): boolean;
 }
 interface SceneNodeBase {
     key: string;
@@ -185,6 +200,15 @@ interface SceneGroup extends SceneNodeBase {
     kind: "group";
     children: readonly BoardScene[];
 }
+/**
+ * **No renderer or SVG-export interpreter exists for this node kind yet**
+ * (tracked as deferred work — see `renderer/shapes/customObjects.ts`'s
+ * `"path"` case). Returning a `ScenePath` from `describe()` renders nothing,
+ * exports nothing, and contributes no hit-test bounds — it neither errors
+ * nor emits a diagnostic. Until an interpreter ships, build custom shapes
+ * from `SceneRect`/`SceneEllipse`/`SceneGroup`/`SceneText`/`SceneImage`
+ * instead.
+ */
 interface ScenePath extends SceneNodeBase {
     kind: "path";
     /** SVG-style path data, board-local coordinates. */
@@ -340,8 +364,23 @@ interface Lockable {
     lockedByName?: string;
 }
 
+/**
+ * Per-object visibility (Phase 8) — mirrors `itemLock.ts`'s `Lockable`
+ * pattern exactly, but simpler: unlike a lock, hidden state carries no
+ * holder/ownership concept, so there's no analogue to `LockHolder`/
+ * `canUnlockItem`. A hidden object stays fully present in the Document
+ * (still serializes, persists, syncs, undoes/redoes) — it just skips
+ * rendering and hit-testing/selection candidacy. `hidden` absent or
+ * `false` means visible; this keeps every pre-Phase-8 document (which has
+ * no `hidden` field on any object at all) implicitly fully visible with
+ * zero migration needed.
+ */
+interface Hideable {
+    hidden?: boolean;
+}
+
 /** A kitchen timer sitting on the board. Remaining time is derived, not ticked. */
-interface KitchenTimer extends Lockable {
+interface KitchenTimer extends Lockable, Hideable {
     id: string;
     x: number;
     y: number;
@@ -355,6 +394,133 @@ interface KitchenTimer extends Lockable {
     runningSince?: number;
 }
 
+interface RectangleObject extends Lockable, Hideable {
+    id: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    fill?: string;
+    stroke?: string;
+    strokeWidth?: number;
+    /** Corner radius in board units; clamped to at most half the shorter side at render time. */
+    cornerRadius?: number;
+    /** `[0, 1]`; undefined means fully opaque (Phase 4). */
+    opacity?: number;
+    /**
+     * Radians, about the shape's own center `(x + width/2, y - height/2)`.
+     * Undefined means 0 (Phase 3). `x`/`y`/`width`/`height` stay in the
+     * shape's own unrotated local frame — rotation is a separate, applied-last
+     * transform, not baked into them, matching how Stroke/CustomBoardObject
+     * keep geometry and placement independent via their own `matrix`.
+     */
+    rotation?: number;
+}
+interface EllipseObject extends Lockable, Hideable {
+    id: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    fill?: string;
+    stroke?: string;
+    strokeWidth?: number;
+    /** `[0, 1]`; undefined means fully opaque (Phase 4). */
+    opacity?: number;
+    /** Radians, about the shape's own center — see RectangleObject's `rotation` doc. */
+    rotation?: number;
+}
+/** `"none"` is a plain line with no arrowhead; today's only real head shape is `"triangle"`. New head shapes extend this union without touching `ArrowObject`'s own fields. */
+type ArrowHeadStyle = "triangle" | "none";
+interface LineObject extends Lockable, Hideable {
+    id: string;
+    start: BoardPoint;
+    end: BoardPoint;
+    stroke?: string;
+    strokeWidth?: number;
+    opacity?: number;
+}
+interface ArrowObject extends Lockable, Hideable {
+    id: string;
+    start: BoardPoint;
+    end: BoardPoint;
+    head?: ArrowHeadStyle;
+    stroke?: string;
+    strokeWidth?: number;
+    opacity?: number;
+}
+/**
+ * Triangle(3)/Diamond(4)/Pentagon(5)/Hexagon(6)/Octagon(8) as one shared
+ * type instead of five near-duplicate interfaces — a regular N-gon
+ * inscribed in the same `x`/`y`/`width`/`height`/`rotation` bounding box
+ * Rectangle already uses, parameterized by `sides`. Diamond is exactly a
+ * 4-sided regular polygon with vertex 0 pointing right (not up, like
+ * Triangle/Pentagon/Hexagon) — see `polygonGeometry.ts`'s
+ * `polygonStartAngle`, which encodes each side count's own vertex
+ * orientation so the outline always matches the legacy drag-preview shape.
+ */
+interface PolygonObject extends Lockable, Hideable {
+    id: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    sides: 3 | 4 | 5 | 6 | 8;
+    fill?: string;
+    stroke?: string;
+    strokeWidth?: number;
+    opacity?: number;
+    /** Radians, about the shape's own center — see RectangleObject's `rotation` doc. */
+    rotation?: number;
+}
+/** Same bounding-box/rotation convention as Rectangle; a 5-pointed star with a tuned inner-radius ratio, matching the legacy tool's own default (see `polygonGeometry.ts`'s `starPoints`). */
+interface StarObject extends Lockable, Hideable {
+    id: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    /** Vertex count; today's only shipped preset is 5, matching the legacy tool. */
+    points: number;
+    /** `(0, 1)` — inner vertex radius as a fraction of the outer radius. */
+    innerRadiusRatio: number;
+    fill?: string;
+    stroke?: string;
+    strokeWidth?: number;
+    opacity?: number;
+    rotation?: number;
+}
+/** Same bounding-box/rotation convention as Rectangle; the standard parametric heart curve (see `polygonGeometry.ts`'s `heartPoints`), no extra parameters beyond the shared shape fields. */
+interface HeartObject extends Lockable, Hideable {
+    id: string;
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    fill?: string;
+    stroke?: string;
+    strokeWidth?: number;
+    opacity?: number;
+    rotation?: number;
+}
+/**
+ * A logical grouping of other board objects (Phase 3 — Selection,
+ * Transformation & Grouping). Deliberately has no `x`/`y`/`transform` of its
+ * own — a group's bounds are always derived on demand from its (recursively
+ * resolved) children, and "moving/rotating/scaling the group" is exactly a
+ * multi-object transform applied to those children, nothing more. A group
+ * has no renderer/mesh of its own; its only visual presence is the
+ * selection gizmo's bounding box while it's the current selection.
+ *
+ * `children` may itself contain other group ids (nested groups) — expanding
+ * a group into its leaf members is always done by the caller (recursively,
+ * with cycle protection), never assumed here.
+ */
+interface GroupObject extends Lockable, Hideable {
+    id: string;
+    children: string[];
+}
+
 interface BoardPoint {
     x: number;
     y: number;
@@ -375,7 +541,7 @@ interface StrokePoint extends BoardPoint {
  * geometric outline, not an expressive ink mark.
  */
 type StrokeTool = "marker" | "highlighter" | "shape";
-interface Stroke extends Lockable {
+interface Stroke extends Lockable, Hideable {
     id: string;
     color: string;
     baseWidth: number;
@@ -391,7 +557,7 @@ interface Stroke extends Lockable {
     clusterId?: string;
 }
 type SerializedPoint = [number, number, number, number];
-interface SerializedStroke extends Lockable {
+interface SerializedStroke extends Lockable, Hideable {
     id: string;
     color: string;
     baseWidth: number;
@@ -417,6 +583,31 @@ interface SerializedDocument {
     timers?: KitchenTimer[];
     /** Absent in documents saved before Custom board objects existed (ticket #22). */
     customObjects?: CustomBoardObject[];
+    /** Absent in documents saved before semantic Rectangle objects existed (Phase 2). */
+    rectangles?: RectangleObject[];
+    /** Absent in documents saved before semantic Ellipse objects existed (Phase 2). */
+    ellipses?: EllipseObject[];
+    /** Absent in documents saved before Groups existed (Phase 3). */
+    groups?: GroupObject[];
+    /** Absent in documents saved before semantic Line objects existed (Phase 4). */
+    lines?: LineObject[];
+    /** Absent in documents saved before semantic Arrow objects existed (Phase 4). */
+    arrows?: ArrowObject[];
+    /** Absent in documents saved before semantic Polygon objects existed (Phase 4). */
+    polygons?: PolygonObject[];
+    /** Absent in documents saved before semantic Star objects existed (Phase 4). */
+    stars?: StarObject[];
+    /** Absent in documents saved before semantic Heart objects existed (Phase 4). */
+    hearts?: HeartObject[];
+    /**
+     * Every content-object id (every type above except comments, which are
+     * host-synced and never enter this schema) in paint order, back to front.
+     * Absent in documents saved before per-object z-order existed (Phase 3) —
+     * migration synthesizes a default order preserving the old fixed-Z-band
+     * visual stacking exactly, so an existing document never visibly changes
+     * on load; only an explicit reorder action touches this from then on.
+     */
+    objectOrder?: string[];
 }
 /**
  * One collaborator's vote on a note. One per person; toggling removes it.
@@ -430,7 +621,7 @@ interface NoteVote {
  * A sticky note: content floating above the board at a z-offset (pillar 3 —
  * depth as an organizational axis). Center position in board space.
  */
-interface StickyNote extends Lockable {
+interface StickyNote extends Lockable, Hideable {
     id: string;
     x: number;
     y: number;
@@ -448,7 +639,7 @@ interface StickyNote extends Lockable {
  * top-left corner; lines flow downward (-y). Text joins the clustering
  * system like handwriting (build prompt §6.4).
  */
-interface TextBlock extends Lockable {
+interface TextBlock extends Lockable, Hideable {
     id: string;
     x: number;
     y: number;
@@ -462,7 +653,7 @@ interface TextBlock extends Lockable {
  * Interactive structured table on the board. Position (x, y) is top-left in board units.
  * Cells are indexed as `${row},${col}` keys mapping to cell text content.
  */
-interface TableBlock extends Lockable {
+interface TableBlock extends Lockable, Hideable {
     id: string;
     x: number;
     y: number;
@@ -479,7 +670,7 @@ interface TableBlock extends Lockable {
  * An imported image block on the board plane.
  * Coordinates (x, y) represent the center of the image in board space.
  */
-interface ImageBlock extends Lockable {
+interface ImageBlock extends Lockable, Hideable {
     id: string;
     /**
      * A legacy, read-only data URL (or, historically, an arbitrary string) —
@@ -616,7 +807,7 @@ interface BoardSnapshot {
  * here, matching the engine's own internal selection-badge behavior.
  */
 interface FocusedItem {
-    readonly type: "stroke" | "note" | "text" | "table" | "image" | "timer" | "custom";
+    readonly type: "stroke" | "note" | "text" | "table" | "image" | "timer" | "rectangle" | "ellipse" | "group" | "line" | "arrow" | "polygon" | "star" | "heart" | "custom";
     readonly id: string;
     readonly locked: boolean;
     readonly lockedBy?: string;
@@ -697,6 +888,8 @@ interface BoardEventMap {
     "asset-diagnostic": AssetDiagnostic;
     /** A batch of Ops was reconciled (not applied as-sent) by the persistence adapter (ticket #24). */
     "persistence-diagnostic": PersistenceDiagnostic;
+    /** The collaboration server has confirmed receipt of these op ids (Phase 7) — observability only; the Document was already correct via optimistic local apply before this ever fires. */
+    "collaboration-ops-acknowledged": CollaborationAckDiagnostic;
     audit: unknown;
     error: BoardControllerError;
     disposed: undefined;
@@ -760,9 +953,12 @@ interface PresenceView {
     readonly height: number;
 }
 /**
- * A Host-owned collaborator, synced in for cursor/roster rendering only.
- * Presence is ephemeral — it never touches the Document, Ops, undo/redo,
- * or persistence — so this is a read/query capability, not an adapter.
+ * A collaborator, synced in for cursor/roster rendering only. Presence is
+ * ephemeral — it never touches the Document, Ops, undo/redo, or persistence
+ * (ADR 0006/0007). Two ways a roster gets populated (`presence.sync`
+ * directly, or a `CollaborationAdapter`'s optional presence channel —
+ * Phase 6, ADR 0015) both feed the exact same read/query capability below;
+ * a Host picks one, not both, for a given controller.
  */
 interface PresenceUser {
     readonly id: string;
@@ -771,6 +967,14 @@ interface PresenceUser {
     readonly tool?: string;
     readonly cursor?: PresenceCursor;
     readonly view?: PresenceView;
+    /** Host-supplied extras (avatar URL, role, etc.) — opaque to Scrawl, never interpreted. */
+    readonly metadata?: Record<string, unknown>;
+}
+/** This client's own local presence, published via `presence.broadcast()` (Phase 6). */
+interface LocalPresence {
+    readonly cursor?: PresenceCursor | null;
+    readonly view?: PresenceView | null;
+    readonly tool?: string;
 }
 /**
  * The Custom arm wraps `CustomBoardObject` under the same `type` discriminant
@@ -798,6 +1002,22 @@ type BoardObject = ({
 } & ImageBlock) | ({
     type: "timer";
 } & KitchenTimer) | ({
+    type: "rectangle";
+} & RectangleObject) | ({
+    type: "ellipse";
+} & EllipseObject) | ({
+    type: "group";
+} & GroupObject) | ({
+    type: "line";
+} & LineObject) | ({
+    type: "arrow";
+} & ArrowObject) | ({
+    type: "polygon";
+} & PolygonObject) | ({
+    type: "star";
+} & StarObject) | ({
+    type: "heart";
+} & HeartObject) | ({
     type: "custom";
     customType: ObjectType;
 } & Omit<CustomBoardObject, "type">);
@@ -826,6 +1046,30 @@ type BoardObjectInput = {
     type: "timer";
     id?: string;
 } & Omit<KitchenTimer, "id">) | ({
+    type: "rectangle";
+    id?: string;
+} & Omit<RectangleObject, "id">) | ({
+    type: "ellipse";
+    id?: string;
+} & Omit<EllipseObject, "id">) | ({
+    type: "group";
+    id?: string;
+} & Omit<GroupObject, "id">) | ({
+    type: "line";
+    id?: string;
+} & Omit<LineObject, "id">) | ({
+    type: "arrow";
+    id?: string;
+} & Omit<ArrowObject, "id">) | ({
+    type: "polygon";
+    id?: string;
+} & Omit<PolygonObject, "id">) | ({
+    type: "star";
+    id?: string;
+} & Omit<StarObject, "id">) | ({
+    type: "heart";
+    id?: string;
+} & Omit<HeartObject, "id">) | ({
     type: "custom";
     id?: string;
     customType: ObjectType;
@@ -856,10 +1100,34 @@ type LoadResult = {
 } | {
     state: "missing";
 };
+/**
+ * Result of a whole-document `PersistenceAdapter.replace()` call (ADR 0006:
+ * "Whole-document writes survive only for create, clear-board and import,
+ * where replacing everything is the actual intent"). Revision-gated, unlike
+ * `applyOps` — `conflict` means `baseRevision` was stale (someone else's
+ * write landed first); the caller must reload and never overwrites blind.
+ */
+type ReplaceResult = {
+    state: "applied";
+    revision: string;
+} | {
+    state: "conflict";
+    currentRevision: string;
+};
+/**
+ * The one sanctioned seam for persisting a Board's Document to a Host's own
+ * storage — implement this against a database, an HTTP API, IndexedDB
+ * (see `@scrawl-board/board/local`'s `createIndexedDBPersistence`), or
+ * anything else. `load()` fetches the current state on connect; `applyOps()`
+ * streams incremental Ops as edits happen; `replace()` is only for
+ * whole-document writes (create, clear-board, import — see ADR 0006) and is
+ * revision-gated so a stale write never silently clobbers a newer one.
+ * Passed via `createBoardController({ adapters: { persistence } })`.
+ */
 interface PersistenceAdapter {
     load(context: DocumentContext): Promise<LoadResult>;
     applyOps(context: DocumentContext, ops: readonly ControllerOp[]): Promise<ApplyOpsResult>;
-    replace(context: DocumentContext, document: CurrentSerializedDocument, baseRevision: string): Promise<unknown>;
+    replace(context: DocumentContext, document: CurrentSerializedDocument, baseRevision: string): Promise<ReplaceResult>;
 }
 /**
  * `"reconcile"` (ticket #24) means the server authoritatively resolved the
@@ -883,14 +1151,59 @@ interface PersistenceDiagnostic {
     rejectedOpIds: readonly string[];
     revision: string;
 }
+/** Emitted as `"collaboration-ops-acknowledged"` (Phase 7) — the server has confirmed receipt of these op ids on the live pipe. */
+interface CollaborationAckDiagnostic {
+    opIds: readonly string[];
+}
 interface ControllerOp {
     id: string;
     schemaVersion: 1;
     kind: "upsert" | "restore" | "remove";
-    objectType: "stroke" | "note" | "text" | "table" | "image" | "timer" | "custom";
+    objectType: "stroke" | "note" | "text" | "table" | "image" | "timer" | "rectangle" | "ellipse" | "group" | "line" | "arrow" | "polygon" | "star" | "heart" | "custom"
+    /**
+     * A whole-document paint-order sync (Phase 3), not a per-object type —
+     * `objectId` is always the fixed sentinel `"order"` and `payload` is
+     * `{ order: string[] }`. The only `objectType` with no matching
+     * `BoardObject`/document collection; kept in this same union (rather
+     * than a separate wire message) so it flows through the existing
+     * `PersistenceAdapter`/`CollaborationAdapter` opaquely, unchanged.
+     */
+     | "order";
     objectId: string;
     payload?: unknown;
+    /**
+     * This op's position in its own originating client's local sequence
+     * (Phase 7) — 1, 2, 3, ... per controller instance, distinct from `id`
+     * (an opaque, globally-unique identifier used for dedup/ack, not
+     * ordering) and from a server's own authoritative ordering (e.g.
+     * `referenceCollaborationServer.ts`'s per-room `version` counter).
+     * Present on every op this SDK originates locally; a remote peer's op
+     * carries whatever its own origin set, unchanged — never renumbered in
+     * transit. Absent on an op minted by decoding the legacy wire envelope
+     * (`scrawlOpEnvelope.ts`), which predates this field and has no
+     * per-client sequence concept of its own.
+     */
+    clientSequence?: number;
+    /**
+     * The `CollaboratorIdentity.id` of this op's originating client (Phase
+     * 7) — set for every op this SDK originates locally when `identity` is
+     * configured, omitted entirely otherwise (never sent as `undefined`).
+     * The explicit foundation for a future per-author undo filter (a local
+     * user's own undo should only ever touch their own ops) — no undo-stack
+     * behavior itself changes this phase.
+     */
+    clientId?: string;
 }
+/**
+ * The one sanctioned seam for real-time multiplayer — implement this against
+ * a Host's own collaboration backend (WebSocket relay, CRDT server, etc.).
+ * `connect()` is called once per controller with the local user's
+ * `identity` and a `receive` callback the adapter invokes with incoming
+ * Ops, presence updates, acks, and connection status; it resolves with a
+ * `CollaborationSession` the controller uses to send local Ops and presence
+ * back out. Passed via `createBoardController({ adapters: { collaboration } })`;
+ * omit it entirely to run single-player.
+ */
 interface CollaborationAdapter {
     connect(options: DocumentContext & {
         identity: CollaboratorIdentity;
@@ -901,14 +1214,72 @@ interface CollaboratorIdentity {
     id: string;
     name: string;
     color?: string;
+    /** Host-supplied extras (avatar URL, role, etc.) — opaque to Scrawl, forwarded into any resulting `PresenceUser` unread and never interpreted. */
+    metadata?: Record<string, unknown>;
 }
 interface CollaborationReceiver {
     ops(ops: readonly ControllerOp[]): void;
+    /**
+     * The current presence roster (Phase 6, ADR 0015) — always a full
+     * replacement, never a delta, matching `presence.sync`'s existing
+     * semantics exactly (an adapter that aggregates wire deltas into a full
+     * roster before calling this is the adapter's own job, not the
+     * controller's). Required on this interface (not optional) because a
+     * Host only ever *consumes* `CollaborationReceiver` — never implements
+     * it — so adding a required method here cannot break an existing custom
+     * `CollaborationAdapter`. An adapter with no presence support simply
+     * never calls it.
+     */
+    presence(users: readonly PresenceUser[]): void;
+    /**
+     * The server has confirmed receipt of these op ids (Phase 7) —
+     * distinguishes "sent" from "server accepted," which `sendOps` alone
+     * (fire-and-forget) cannot. Required for the same reason `presence` is:
+     * Hosts only ever consume this interface, never implement it, so this
+     * cannot break an existing custom `CollaborationAdapter`. An adapter with
+     * no ack support simply never calls it — the collaboration pipe still
+     * works exactly as it did before this existed, just without the
+     * bookkeeping/observability this enables.
+     */
+    acknowledged(opIds: readonly string[]): void;
     status(state: "online" | "reconnecting" | "offline"): void;
     error(cause: unknown): void;
 }
+/**
+ * Result of `CollaborationSession.requestSync()` (Phase 7). `"ops"` means
+ * the adapter's own live-pipe cache fully covered the gap since the
+ * caller's last known revision — apply `ops` and the client is caught up,
+ * no persistence reload needed. `"unavailable"` means it couldn't (gap too
+ * large, server restarted, or the adapter has no retained history at all)
+ * — the caller must fall back to a persistence-backed reload. This is a
+ * best-effort *liveness* cache, deliberately never a durable source of
+ * truth (ADR 0006's "collaboration is never a second source of document
+ * truth" — see ADR 0015's own extension of that principle to presence,
+ * now extended once more, the same way, to this).
+ */
+type CollaborationSyncResult = {
+    state: "ops";
+    ops: readonly ControllerOp[];
+    serverRevision: string;
+} | {
+    state: "unavailable";
+};
 interface CollaborationSession {
     sendOps(ops: readonly ControllerOp[]): void;
+    /**
+     * Publishes this client's own local presence (Phase 6, ADR 0015) —
+     * best-effort, unordered, never persisted, never an Op. Optional: an
+     * adapter that doesn't support presence simply omits this method, and
+     * `presence.broadcast()` becomes a silent no-op.
+     */
+    updatePresence?(presence: LocalPresence): void;
+    /**
+     * Requests an incremental catch-up after a reconnect (Phase 7) — optional;
+     * an adapter that doesn't support this simply omits the method, and the
+     * caller (`resyncAfterReconnect`) goes straight to its existing
+     * persistence-backed full reload, unchanged from Phase 6.
+     */
+    requestSync?(): Promise<CollaborationSyncResult>;
     close(): Promise<void>;
 }
 interface CreateBoardControllerOptions {
@@ -948,6 +1319,87 @@ interface CreateBoardControllerOptions {
      * doesn't use the React theme system can set this directly instead.
      */
     boardTheme?: BoardThemeOptions;
+    /**
+     * Debounced auto-flush of pending persistence Ops after document changes
+     * settle (Phase 5). Enabled by default (1000ms debounce) whenever
+     * `adapters.persistence` is configured — today, without this, a Host must
+     * call `flush()` manually after every edit for anything to persist. Pass
+     * `false` to opt out entirely and drive `flush()` yourself, preserving
+     * prior behavior exactly. Never fires on a per-change basis — rapid edits
+     * coalesce into one flush of their final state (ADR 0006).
+     */
+    autosave?: boolean | {
+        debounceMs?: number;
+    };
+    /**
+     * Throttle for `presence.broadcast()` (Phase 6, ADR 0015) — the minimum
+     * interval between outgoing presence updates sent via the configured
+     * `CollaborationAdapter`. Defaults to 50ms. A trailing throttle: the
+     * latest value passed to `broadcast()` always eventually sends, even if
+     * calls arrive faster than this interval.
+     */
+    presenceThrottleMs?: number;
+    /**
+     * Caps how many `ControllerOp`s can sit queued, unsent, for the
+     * persistence pipe (`pendingOps`) or the collaboration pipe
+     * (`pendingCollaborationOps`) at once (Phase 7) — each pipe is capped
+     * independently. Prevents unbounded memory growth from a long-lived
+     * offline session or a stuck adapter. Exceeding it never fails or drops
+     * the local edit itself (the Document already applied it optimistically)
+     * — only queueing for that one pipe is skipped, and a
+     * `{code:"queue-overflow", retryable:false}` error is emitted so a Host
+     * can react. Defaults to 1000 — the Phase 9 collaboration coalescing
+     * above (`collaborationCoalesceMs`) already keeps a busy drag from
+     * approaching this on its own, so hitting it in practice means a pipe
+     * has been offline/stuck for a genuinely long editing session.
+     *
+     * **Recovery** (Phase 9): the dropped op itself is gone from that one
+     * pipe's queue — there is no automatic backfill, and the live
+     * controller keeps running with that pipe now silently missing one
+     * edit. Two things stay true regardless: (1) the in-memory Document is
+     * never affected — a queue-overflow can never corrupt or roll back a
+     * local edit, only skip sending it; (2) staleness is per-object, not
+     * permanent — any *later* edit to that same object produces a brand
+     * new, undropped Op carrying its full current state, which naturally
+     * supersedes the gap (the Op model is already last-write-wins/
+     * idempotent, so a superseding Op doesn't need the earlier one to have
+     * arrived). The real risk is an object that's dropped and never edited
+     * again before the controller is disposed or the page reloads — a Host
+     * that needs strict durability should treat `queue-overflow` as a
+     * signal to check `persistence.state`/`pendingOps` pressure (via
+     * `usePersistenceStatus`/`getSnapshot().connection.persistence`)
+     * before disposing, not assume disposing and reconnecting alone
+     * repairs the gap (a fresh `load()` only returns what the backend
+     * already has, which is exactly what's missing the dropped edit).
+     */
+    maxPendingOps?: number;
+    /**
+     * Coalescing window (ms) for outgoing collaboration Ops (Phase 9) — same
+     * trailing-throttle shape as `presenceThrottleMs`: the first Op after an
+     * idle period sends immediately, and subsequent Ops for the *same*
+     * object within this window replace each other (latest value wins,
+     * matching the already-idempotent Op model) rather than each triggering
+     * its own send. A multi-second drag that previously sent one full Op per
+     * pointer-move now sends at most one per window per touched object.
+     * Persistence (`pendingOps`) is unaffected — it already debounces via
+     * `autosave`, so this option only changes live collaboration traffic.
+     * Defaults to 50ms.
+     */
+    collaborationCoalesceMs?: number;
+    /**
+     * Caps how many resolved objects a single `content.copy`/`content.cut`
+     * (or their Cmd/Ctrl+C/X keyboard equivalents) will hold in the
+     * in-memory clipboard at once (Phase 9) — `expandSelection` recursively
+     * expands groups, so an unbounded selection (a huge group, or thousands
+     * of individually selected strokes) could otherwise clone and retain an
+     * arbitrarily large snapshot indefinitely, until the next copy/cut
+     * replaces it. Exceeding it rejects the whole copy/cut (nothing is
+     * cloned, and — for cut — nothing is removed from the Document either,
+     * never a partial copy of an arbitrary subset) and emits a
+     * `{code:"clipboard-overflow", retryable:false}` error. Defaults to
+     * 5000.
+     */
+    maxClipboardItems?: number;
 }
 interface BoardController {
     readonly document: ReadonlyBoardDocument;
@@ -979,6 +1431,15 @@ interface BoardController {
     };
     readonly view: {
         fit(): void;
+        /**
+         * Frame the current selection (Phase 8), the same way `fit()` frames the
+         * whole board. A no-op with nothing selected — deliberately doesn't fall
+         * back to `fit()`'s "frame everything," which would be a surprising
+         * result for an empty selection. On a headless board this can only
+         * re-center the view (no viewport to compute a real zoom-to-fit from),
+         * matching `fit()`'s own headless limitation exactly.
+         */
+        zoomToSelection(): void;
         zoomTo(value: number): void;
         centerOn(point: BoardPoint): void;
         get(): BoardView;
@@ -1000,6 +1461,64 @@ interface BoardController {
          * Unknown ids are silently skipped, matching `remove`'s convention.
          */
         duplicate(ids: readonly string[]): readonly string[];
+        /**
+         * Creates a new Group referencing `ids` as its children and returns its
+         * id, as one undoable step. Unknown ids are silently skipped, matching
+         * `duplicate`/`remove`'s convention. A child id that's itself a group
+         * makes a nested group — expanding nested groups into their leaf
+         * members is always the caller's job, never assumed here (matches the
+         * document-model `GroupObject` itself).
+         */
+        group(ids: readonly string[]): string;
+        /**
+         * Dissolves one group, returning its immediate children's ids (a nested
+         * subgroup among them stays intact, itself still a group) — the group
+         * record itself is removed, the children are untouched. A no-op
+         * (returns `[]`) if `groupId` isn't a group.
+         */
+        ungroup(groupId: string): readonly string[];
+        /**
+         * Aligns every given object's matching edge/center to the corresponding
+         * edge/center of their combined bounding box, as one undoable step.
+         * `"top"`/`"bottom"` follow board space's Y-up convention (`"top"` is
+         * the larger Y). Ids that don't resolve, or resolve to a Group (which
+         * has no position of its own), are skipped. A no-op under 2 resolvable
+         * ids — there's nothing to align relative to.
+         */
+        align(ids: readonly string[], edge: "left" | "right" | "top" | "bottom" | "centerX" | "centerY"): void;
+        /**
+         * Spaces the middle objects' centers evenly between the first and last
+         * (sorted along `axis`), as one undoable step — the two endpoints don't
+         * move. Ids that don't resolve, or resolve to a Group, are skipped. A
+         * no-op under 3 resolvable ids — there's no "middle" to distribute.
+         */
+        distribute(ids: readonly string[], axis: "x" | "y"): void;
+        /**
+         * Snapshots `ids` (recursively expanded through any group, same as
+         * `duplicate`) into an internal in-memory clipboard — never
+         * `navigator.clipboard`, scoped to this one controller instance and
+         * replaced wholesale by the next `copy`/`cut`. Read-only; works even
+         * on a read-only board.
+         */
+        copy(ids: readonly string[]): void;
+        /** `copy`, then removes every resolved object (recursively through any group) as one undoable step. */
+        cut(ids: readonly string[]): void;
+        /**
+         * Clones the current clipboard contents onto the board as one undoable
+         * step, offset the same small cascade `duplicate` uses (no cursor
+         * position to paste relative to yet). Returns the new top-level ids —
+         * a pasted group's own id stands for its (also-pasted) children, which
+         * aren't listed separately. `[]` when the clipboard is empty.
+         */
+        paste(): readonly string[];
+        /**
+         * Select every top-level object (Phase 8) — a group's own id stands for
+         * its children, which aren't selected separately, matching `paste`'s own
+         * "what the user sees" id list. Hidden objects are excluded, consistent
+         * with them already being excluded from marquee selection. Works with
+         * no canvas/engine, same as {@link toggleSelectionVisibility}.
+         */
+        selectAll(): void;
         table: {
             addRow(tableId: string): void;
             addCol(tableId: string): void;
@@ -1010,6 +1529,29 @@ interface BoardController {
         };
         select(ids: readonly string[]): void;
         import(document: SerializedBoardDocument): readonly string[];
+        /**
+         * Toggle lock state for the current selection (or focused note/text/
+         * table/image/timer), matching whatever a single Host lock/unlock
+         * control already does per object type. A no-op with nothing selected,
+         * on a headless board, or when every actionable target is locked by
+         * another collaborator who isn't the current lock holder.
+         */
+        toggleSelectionLock(): void;
+        /**
+         * Toggle hidden state for the current selection, as one undo entry
+         * (Phase 8). If any selected object is hidden, shows every selected
+         * object; otherwise hides them all — same "any wins" semantics as
+         * {@link toggleSelectionLock}. Hidden objects stay fully present in the
+         * document (they still serialize, persist, sync, undo/redo) — they just
+         * stop rendering and stop being hit-testable/selectable via pointer
+         * interaction. Unlike `toggleSelectionLock`, this works on a headless
+         * board too: it only touches `selection`/the document, no canvas or
+         * engine involved. Custom objects have no visibility concept (no
+         * `Hideable` field) and are silently skipped, matching how
+         * `toggleSelectionLock` already excludes them. A no-op with nothing
+         * selected or when the selection is only custom objects.
+         */
+        toggleSelectionVisibility(): void;
     };
     readonly query: {
         get(id: string): DeepReadonly<BoardObject> | undefined;
@@ -1038,6 +1580,15 @@ interface BoardController {
         follow(view: PresenceView): void;
         /** Ease the camera to a peer's view; returns false (no-op) while mid-stroke. */
         gather(view: PresenceView): boolean;
+        /**
+         * Publishes this client's own cursor/tool/view for other collaborators
+         * (Phase 6, ADR 0015), via the configured `CollaborationAdapter` —
+         * throttled internally (`presenceThrottleMs` option, default 50ms) so
+         * a raw pointermove stream never becomes a message-per-event flood. A
+         * no-op if no collaboration adapter is configured, or if the
+         * configured one doesn't implement `updatePresence`.
+         */
+        broadcast(local: LocalPresence): void;
     };
     readonly export: {
         svg(): string;
@@ -1063,7 +1614,19 @@ interface BoardController {
     }>;
     dispose(): Promise<void>;
 }
+/**
+ * Creates a {@link BoardController} — the SDK's canonical, capability-grouped
+ * entry point (`content`, `tools`, `style`, `history`, `view`, `query`,
+ * `comments`, `presence`, `export`, `assets`, plus top-level `getSnapshot`/
+ * `subscribe`/`on`/`setReadOnly`/`flush`/`dispose`) for driving a Board
+ * imperatively from any JS/TS runtime. Supply a `canvas` to render, or omit
+ * it to run headless (SSR, tests, or a document/history-only integration).
+ * Persistence and Collaboration are opt-in via `options.adapters` — without
+ * them the controller runs entirely in memory. Call `dispose()` when done to
+ * release the renderer, adapters, and any pending timers.
+ */
 declare function createBoardController(options: CreateBoardControllerOptions): BoardController;
+/** @deprecated Use `BoardController.getSnapshot()`'s return type instead. */
 type LocalBoardSnapshot = {
     documentId: string;
     selectedStrokeId: string | null;
@@ -1072,10 +1635,12 @@ type LocalBoardSnapshot = {
     canRedo: boolean;
     disposed: boolean;
 };
+/** @deprecated Use `CreateBoardControllerOptions` with `createBoardController` instead. */
 type LocalBoardOptions = {
     documentId: string;
     initialDocument?: SerializedBoardDocument;
 };
+/** @deprecated Use `BoardController` (from `createBoardController`) instead — this stroke-only, single-tool surface predates the full capability-grouped controller. */
 type LocalBoard = {
     drawStroke(stroke: Stroke): void;
     selectAt(point: BoardPoint): string | null;
@@ -1086,7 +1651,20 @@ type LocalBoard = {
     subscribe(listener: () => void): () => void;
     dispose(): Promise<void>;
 };
+/** @deprecated Use `createBoardController` instead — this is a thin, stroke-only wrapper kept for the original Phase 1 tracer's compatibility. */
 declare function createLocalBoard(options: LocalBoardOptions): LocalBoard;
 
-export { AssetResolutionError, STAMPS, SUPPORTED_ASSET_MEDIA_TYPES, assetRef, clampAssetCacheBytes, cloneCustomObject, createBoardController, createLocalBoard, isAssetRef, isStampKind, stampDataUrl };
-export type { ApplyOpsResult, AssetDiagnostic, AssetIngestRequest, AssetIngestResult, AssetIngestor, AssetKind, AssetPurpose, AssetRef, AssetResolutionErrorCode, AssetResolveRequest, AssetResolveResult, AssetResolver, BoardController, BoardControllerError, BoardEventMap, BoardKeyInput, BoardObject, BoardObjectInput, BoardObjectPatch, BoardPointerInput, BoardScene, BoardSnapshot, BoardStyle, BoardThemeOptions, BoardView, BuiltInTool, CollaborationAdapter, CollaborationReceiver, CollaborationSession, CollaborationSnapshot, CollaboratorIdentity, CommentMarker, ControllerOp, CreateBoardControllerOptions, CustomBoardObject, CustomObjectAddInput, CustomObjectDefinition, CustomTool, CustomToolDefinition, DeepReadonly, DocumentContext, ExtensionCommand, ExtensionDiagnostic, ExtensionHitResult, ExtensionId, ExtensionRequirement, FocusedItem, InputModifiers, JsonObject, JsonValue, LoadResult, LocalBoard, LocalBoardOptions, LocalBoardSnapshot, Mat2x3, ObjectDescribeContext, ObjectIntent, ObjectType, PersistenceAdapter, PersistenceDiagnostic, PersistenceSnapshot, PresenceCursor, PresenceUser, PresenceView, QueryableBoardObject, ReadonlyBoardDocument, ReadonlyCustomObject, ReadonlyDocumentChange, SceneEllipse, SceneGroup, SceneImage, ScenePath, SceneRect, SceneText, ScrawlExtension, ScreenPoint, ScreenRect, StampKind, SupportedAssetMediaType, ToolCancelReason, ToolCapabilities, ToolCursor, ToolId };
+interface CreateMemoryPersistenceOptions {
+    /** Pre-seeded documents, keyed by document id — as if a prior session had already saved them. Seeded documents start at revision "1". */
+    seed?: Record<string, CurrentSerializedDocument>;
+}
+/**
+ * Creates a real, in-memory `PersistenceAdapter`. One instance can back
+ * multiple documents (keyed by `DocumentContext.documentId`, like every
+ * other adapter in this package). State lives only in this instance —
+ * discarded on garbage collection, never written to disk.
+ */
+declare function createMemoryPersistence(options?: CreateMemoryPersistenceOptions): PersistenceAdapter;
+
+export { AssetResolutionError, STAMPS, SUPPORTED_ASSET_MEDIA_TYPES, assetRef, clampAssetCacheBytes, cloneCustomObject, createBoardController, createLocalBoard, createMemoryPersistence, isAssetRef, isStampKind, stampDataUrl };
+export type { ApplyOpsResult, AssetDiagnostic, AssetExportFailure, AssetIngestRequest, AssetIngestResult, AssetIngestor, AssetKind, AssetPurpose, AssetRef, AssetResolutionErrorCode, AssetResolveRequest, AssetResolveResult, AssetResolver, BoardController, BoardControllerError, BoardEventMap, BoardKeyInput, BoardObject, BoardObjectInput, BoardObjectPatch, BoardPointerInput, BoardScene, BoardSnapshot, BoardStyle, BoardThemeOptions, BoardView, BuiltInTool, CollaborationAckDiagnostic, CollaborationAdapter, CollaborationReceiver, CollaborationSession, CollaborationSnapshot, CollaborationSyncResult, CollaboratorIdentity, CommentMarker, ControllerOp, CreateBoardControllerOptions, CreateMemoryPersistenceOptions, CustomBoardObject, CustomObjectAddInput, CustomObjectDefinition, CustomTool, CustomToolDefinition, DeepReadonly, DocumentContext, ExportDocumentSVGOptions, ExportDocumentSVGResult, ExtensionCommand, ExtensionDiagnostic, ExtensionHitResult, ExtensionId, ExtensionRequirement, FocusedItem, InputModifiers, JsonObject, JsonValue, LoadResult, LocalBoard, LocalBoardOptions, LocalBoardSnapshot, LocalPresence, Mat2x3, ObjectDescribeContext, ObjectIntent, ObjectType, PersistenceAdapter, PersistenceDiagnostic, PersistenceSnapshot, PresenceCursor, PresenceUser, PresenceView, QueryableBoardObject, ReadonlyBoardDocument, ReadonlyCustomObject, ReadonlyDocumentChange, ReplaceResult, SceneEllipse, SceneGroup, SceneImage, ScenePath, SceneRect, SceneText, ScrawlExtension, ScreenPoint, ScreenRect, SearchHit, SearchHitKind, SearchableComment, StampKind, SupportedAssetMediaType, ToolCancelReason, ToolCapabilities, ToolCursor, ToolId };