@vercel/board 0.18.1 → 0.20.0

package/dist/{a2-CW8jHGD_.mjs → a2-D__qQpe7.mjs}

@@ -1,15 +1,15 @@
 import { n as DIRECT_UPLOAD_BYTES_MAX, r as IMPORT_BYTES_MAX, t as ATTACHMENT_BYTES_MAX } from "./files-SniSmeEr.mjs";
 import { _ as RemoteWatcherId, b as actorKind, i as Attachment, x as platformAvatar } from "./schemas-Be08nyfW.mjs";
 import "./external-BV_cUncs.mjs";
-import { f as VERSION, n as compileWatcher, o as METHODS, p as SYNC, r as hasCriteria, t as canonicalWatchers } from "./watchers-hash-qlnbKQQ0.mjs";
-import { r as duration, t as BoardError } from "./client-BA-J7usH.mjs";
+import { f as VERSION, n as compileWatcher, o as METHODS, p as SYNC, r as hasCriteria, t as canonicalWatchers } from "./watchers-hash-DYwvkhdX.mjs";
+import { r as duration, t as BoardError } from "./client-ClznIBMg.mjs";
 import { n as derivedId, r as isKeyIdOf } from "./ids-C6AYo1bu.mjs";
-import { a as forbidden, c as toErrorResponse, i as duplicateId, r as badRequest, s as notFound, t as HttpError } from "./errors-DX3hpwWt.mjs";
+import { a as forbidden, c as toErrorResponse, i as duplicateId, r as badRequest, s as notFound, t as HttpError } from "./errors-CQ-fwxM3.mjs";
 import { t as own } from "./own-OwgPWdmh.mjs";
 import { n as replaceMentions } from "./mentions-CB6ShY4R.mjs";
-import { _ as FULL_ACCESS, i as authenticates, v as authorize } from "./auth-Drg9FiC2.mjs";
-import { a as resolveMentions, n as actorSeen } from "./actors-BOamkEuz.mjs";
-import { n as MIDDLEWARE_ACTOR, t as DroppedError } from "./middleware-CqaCwucP.mjs";
+import { _ as FULL_ACCESS, i as authenticates, v as authorize } from "./auth-5nLsx9qB.mjs";
+import { a as resolveMentions, n as actorSeen } from "./actors-rPnEQLZu.mjs";
+import { n as MIDDLEWARE_ACTOR, t as DroppedError } from "./middleware-DUjyQP_a.mjs";
 import { n as syncTarget, r as withEmailMentions } from "./targets-C-wdR5wP.mjs";
 import { t as A2Error } from "./session-clear-wHd5GCpZ-BnKSxReK.mjs";
 import { a as reducer } from "./reducer-CjmvZSAb-D_OSISmj.mjs";
@@ -714,8 +714,32 @@ function createReads(tables, session, projection) {
 		});
 		waitUntil(catching);
 	}
+	/**
+	* The tables caught up with the whole log once on this instance. Until then, a read by index waits
+	* for all of it: tables rebuilt from the log can be far behind, and a message's later events (an
+	* edit, a reaction, a reply) come after its own index. Once caught up, each write applies as it lands.
+	*/
+	let whole = null;
+	function caughtUp() {
+		whole ??= session.consume(projection).then(() => void 0, (error) => {
+			whole = null;
+			throw error;
+		});
+		return whole;
+	}
+	/** `promise`, unless `signal` aborts first: the caller stops waiting, and what it waits for keeps going. */
+	function untilAborted(promise, signal) {
+		if (!signal) return promise;
+		if (signal.aborted) return Promise.reject(signal.reason);
+		return new Promise((resolve, reject) => {
+			const abort = () => reject(signal.reason);
+			signal.addEventListener("abort", abort, { once: true });
+			promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+		});
+	}
 	/** Waits until the tables have applied `index`, or the whole log when it's omitted. */
 	async function ensure(index, signal) {
+		if (index !== void 0) await untilAborted(caughtUp(), signal);
 		if (index !== void 0 && await tables.position() >= index) return;
 		await session.consume(projection, {
 			...index !== void 0 ? { through: index } : {},
@@ -3081,6 +3105,7 @@ function build(options, binding) {
 			return { watchers: principal.access.everywhere("manage") ? all : all.filter((found) => found.owner === principal.id) };
 		},
 		async register(caller, body) {
+			if (body.path) throw new HttpError(501, "no_wake_by_path", "this board wakes a url, not a path: register `url` instead");
 			const { principal } = await identityOf(caller);
 			ownWatchers(principal);
 			if (!principal.access.anywhere("read")) throw forbidden("this token can't read anywhere, so a watcher it registers would see nothing");
@@ -3179,6 +3204,12 @@ function build(options, binding) {
 			if (!principal.access.everywhere("manage")) throw forbidden("this token can't read a source: it needs manage in every channel");
 			return binding.readSource(key, target, limit ?? 50);
 		},
+		async joinSource(caller, { key, target }) {
+			if (!binding.sync.some((entry) => entry.key === key)) throw notFound(`this board doesn't run sync entry ${key}: join it where its sync runs`, "not_synced_here");
+			const { principal } = await identityOf(caller);
+			if (!principal.access.everywhere("manage")) throw forbidden("this token can't join a source: it needs manage in every channel");
+			return binding.joinSource(key, target);
+		},
 		async synced(caller, { id }, signal) {
 			const { principal } = await identityOf(caller);
 			const message = await reads.message(messageAt(id), signal);

package/dist/access.mjs

@@ -1,4 +1,4 @@
-import { a as compileRules, c as githubActions, h as vercelProject, p as oidc } from "./auth-Drg9FiC2.mjs";
-import { i as resolveActor } from "./actors-BOamkEuz.mjs";
-import { t as oidcTokens } from "./tokens-DhuzKzAl.mjs";
+import { a as compileRules, c as githubActions, h as vercelProject, p as oidc } from "./auth-5nLsx9qB.mjs";
+import { i as resolveActor } from "./actors-rPnEQLZu.mjs";
+import { t as oidcTokens } from "./tokens-DUXaXwOj.mjs";
 export { compileRules, githubActions, oidc, oidcTokens, resolveActor, vercelProject };

package/dist/{actors-BOamkEuz.mjs → actors-rPnEQLZu.mjs}

@@ -1,8 +1,8 @@
 import { C as toStorable } from "./schemas-Be08nyfW.mjs";
-import { r as badRequest } from "./errors-DX3hpwWt.mjs";
+import { r as badRequest } from "./errors-CQ-fwxM3.mjs";
 import { t as own } from "./own-OwgPWdmh.mjs";
 import { t as extractMentions } from "./mentions-CB6ShY4R.mjs";
-import { y as parseScope } from "./auth-Drg9FiC2.mjs";
+import { y as parseScope } from "./auth-5nLsx9qB.mjs";
 //#region src/server/actors.ts
 /** Agents whose avatars the board serves itself. */
 const KNOWN_AGENTS = [

package/dist/{auth-Drg9FiC2.mjs → auth-5nLsx9qB.mjs}

@@ -1,5 +1,5 @@
 import { c as ChannelPath, v as SCOPE_MAX } from "./schemas-Be08nyfW.mjs";
-import { a as forbidden, l as unauthorized } from "./errors-DX3hpwWt.mjs";
+import { a as forbidden, l as unauthorized } from "./errors-CQ-fwxM3.mjs";
 //#region src/server/access.ts
 /**
 * What a principal may do in a channel. `read` covers messages, threads,

package/dist/{backend-B-SJ7p6p.d.mts → backend-CWmd4UH-.d.mts}

@@ -2,7 +2,7 @@ import { t as Access } from "./access-CV96SYgr.mjs";
 import { m as RuleFunction, n as AccessRule, r as Authenticate, s as Granted, t as AccessFunction, u as Known } from "./auth-CU56Q2Xh.mjs";
 import { i as Attachment, o as Author, p as Labels } from "./schemas-CWxs3ECJ.mjs";
 import { t as Actor, u as ExternalEvent } from "./folds-CRYY14kc.mjs";
-import { $ as Discovery, Et as PostBody, F as BoardClient, Ft as ScheduleBody, Gt as SourceReadQuery, Kt as SyncAccountBody, Mt as RegistrationView, Qt as SyncCopiesView, Rt as ScheduleView, St as MessagesQuery, Tt as PersonView, Wt as SourceRead, X as BoardEventView, Xt as SyncCodeView, Yt as SyncCodeBody, Z as ChannelView, Zt as SyncCopiesQuery, _n as UploadStartBody, _t as MatchView, bt as MessageView, cn as SyncUnlinkBody, ct as InboxEntry, dn as ThreadView, dt as InboxPushBody, en as SyncFindQuery, et as EditBody, fn as ThreadsPage, ft as InboxQuery, gt as LinkedQuery, hn as TypingBody, ht as LinkedAccount, in as SyncReceiptBody, jt as RegisterBody, kt as ReactBody, ln as SyncedView, lt as InboxItem, nn as SyncImportBody, nt as EventsQuery, on as SyncRootsQuery, ot as IdentityView, p as SyncProvider, pn as ThreadsQuery, pt as LabelBody, q as AckBody, sn as SyncThreadView, st as InboxAckBody, tn as SyncFindView, tt as EventsPage, ut as InboxNextQuery, vn as UploadTicket, vt as MatchesQuery, xt as MessagesPage, yt as Me, z as ProfileOption, zt as SchedulesQuery } from "./provider-B0b9Qxw4.mjs";
+import { $ as Discovery, $t as SyncCodeView, Bt as SchedulesQuery, Et as PostBody, F as BoardClient, Gt as SourceJoinBody, It as ScheduleBody, Jt as SourceReadQuery, Nt as RegistrationView, Qt as SyncCodeBody, St as MessagesQuery, Tt as PersonView, Wt as SourceJoin, X as BoardEventView, Yt as SyncAccountBody, Z as ChannelView, _t as MatchView, an as SyncImportBody, bn as UploadStartBody, bt as MessageView, ct as InboxEntry, dn as SyncUnlinkBody, dt as InboxPushBody, en as SyncCopiesQuery, et as EditBody, fn as SyncedView, ft as InboxQuery, gn as ThreadsQuery, gt as LinkedQuery, hn as ThreadsPage, ht as LinkedAccount, in as SyncFindView, jt as RegisterBody, kt as ReactBody, ln as SyncRootsQuery, lt as InboxItem, mn as ThreadView, nt as EventsQuery, ot as IdentityView, p as SyncProvider, pt as LabelBody, q as AckBody, qt as SourceRead, rn as SyncFindQuery, sn as SyncReceiptBody, st as InboxAckBody, tn as SyncCopiesView, tt as EventsPage, un as SyncThreadView, ut as InboxNextQuery, vn as TypingBody, vt as MatchesQuery, xn as UploadTicket, xt as MessagesPage, yt as Me, z as ProfileOption, zt as ScheduleView } from "./provider-D11Dfda0.mjs";
 import { z } from "zod";
 //#region src/api/protocol.d.ts
 type Input<S extends z.ZodType> = NonNullable<z.output<S>>;
@@ -186,6 +186,11 @@ type Protocol = {
     input: Key & Input<typeof SourceReadQuery>;
     output: SourceRead;
   };
+  /** Adds sync entry `key`'s app to a public channel, where that sync runs and opted in: needs `manage` everywhere. */
+  joinSource: {
+    input: Key & Input<typeof SourceJoinBody>;
+    output: SourceJoin;
+  };
   /** Where a message's thread is synced, and its copy on each target, from sync's records: needs `read` where it is. */
   synced: {
     input: Id;
@@ -618,6 +623,8 @@ type BoardBinding = {
    * `readSource` answers. 404 `not_synced_here` for an entry it doesn't run.
    */
   readSource(key: string, target: string, limit: number): Promise<SourceRead>;
+  /** Adds sync entry `key`'s app to a channel, where it opted in: what `joinSource` answers. 404 `not_synced_here` likewise. */
+  joinSource(key: string, target: string): Promise<SourceJoin>;
   /**
    * The message a platform link names, as each platform this board syncs reads it: the platform,
    * and its own thread and message IDs, the message null for a link to a thread. Any entry of that

package/dist/backend-a2.d.mts

@@ -2,8 +2,8 @@ import { i as Attachment } from "./schemas-CWxs3ECJ.mjs";
 import { t as Actor } from "./folds-CRYY14kc.mjs";
 import { l as Reducer, r as ContractEvent } from "./reducer-CYPHsSmd-BQIfozGi.mjs";
 import { a as SessionAppend, c as SessionConsumeOptions, d as SessionSchedule, f as StateOptions, l as SessionConsumeResult, n as A2Server, o as SessionClearOptions, p as SessionCleared, r as Consumer, s as SessionClearResult, t as A2Scheduler, u as SessionDeadLetters } from "./server-qgez0Xny-D5mLfqFQ.mjs";
-import { $ as Discovery, Mt as RegistrationView, Qt as SyncCopiesView, Rt as ScheduleView, Tt as PersonView, Wt as SourceRead, Xt as SyncCodeView, Z as ChannelView, _t as MatchView, bt as MessageView, ct as InboxEntry, dn as ThreadView, fn as ThreadsPage, ht as LinkedAccount, ln as SyncedView, lt as InboxItem, ot as IdentityView, sn as SyncThreadView, tn as SyncFindView, tt as EventsPage, vn as UploadTicket, xt as MessagesPage, yt as Me } from "./provider-B0b9Qxw4.mjs";
-import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-B-SJ7p6p.mjs";
+import { $ as Discovery, $t as SyncCodeView, Nt as RegistrationView, Tt as PersonView, Wt as SourceJoin, Z as ChannelView, _t as MatchView, bt as MessageView, ct as InboxEntry, fn as SyncedView, hn as ThreadsPage, ht as LinkedAccount, in as SyncFindView, lt as InboxItem, mn as ThreadView, ot as IdentityView, qt as SourceRead, tn as SyncCopiesView, tt as EventsPage, un as SyncThreadView, xn as UploadTicket, xt as MessagesPage, yt as Me, zt as ScheduleView } from "./provider-D11Dfda0.mjs";
+import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-CWmd4UH-.mjs";
 import { n as fsBlob, r as memoryBlob, t as BlobStore } from "./blob-C0J3wbGv.mjs";
 import { t as BoardStore } from "./types-8yq2VnKI.mjs";
 import { z } from "zod";
@@ -220,7 +220,19 @@ export declare function a2(options?: A2Options): {
     watchers: RegistrationView[];
   }>;
   register: (caller: Caller, input: {
+    watch: Record<string, {
+      tail: string;
+      when: "enters" | "matches";
+    }>;
+    sync?: {
+      key: string;
+      platform: string;
+      signIn: boolean;
+    }[] | undefined;
     url?: string | null | undefined;
+    path?: null | undefined;
+    branch?: null | undefined;
+  } | {
     watch: Record<string, {
       tail: string;
       when: "enters" | "matches";
@@ -230,6 +242,9 @@ export declare function a2(options?: A2Options): {
       platform: string;
       signIn: boolean;
     }[] | undefined;
+    url?: null | undefined;
+    path: string;
+    branch?: string | null | undefined;
   }, signal: AbortSignal) => Promise<RegistrationView>;
   matches: (caller: Caller, input: {
     limit?: number | undefined;
@@ -271,6 +286,11 @@ export declare function a2(options?: A2Options): {
     target: string;
     limit?: number | undefined;
   }, signal: AbortSignal) => Promise<SourceRead>;
+  joinSource: (caller: Caller, input: {
+    key: string;
+  } & {
+    target: string;
+  }, signal: AbortSignal) => Promise<SourceJoin>;
   synced: (caller: Caller, input: {
     id: string;
   }, signal: AbortSignal) => Promise<SyncedView>;

package/dist/backend-a2.mjs

@@ -1,2 +1,2 @@
-import { n as fsBlob, r as memoryBlob, t as a2 } from "./a2-CW8jHGD_.mjs";
+import { n as fsBlob, r as memoryBlob, t as a2 } from "./a2-D__qQpe7.mjs";
 export { a2, fsBlob, memoryBlob };

package/dist/{backend-http-7cNb8nJI.d.mts → backend-http-BfWQfvqB.d.mts}

@@ -1,7 +1,7 @@
 import { i as Attachment } from "./schemas-CWxs3ECJ.mjs";
 import { t as Actor } from "./folds-CRYY14kc.mjs";
-import { $ as Discovery, Mt as RegistrationView, Qt as SyncCopiesView, Rt as ScheduleView, Tt as PersonView, Wt as SourceRead, Xt as SyncCodeView, Z as ChannelView, _t as MatchView, bt as MessageView, ct as InboxEntry, dn as ThreadView, fn as ThreadsPage, ht as LinkedAccount, ln as SyncedView, lt as InboxItem, ot as IdentityView, sn as SyncThreadView, tn as SyncFindView, tt as EventsPage, vn as UploadTicket, xt as MessagesPage, yt as Me, z as ProfileOption } from "./provider-B0b9Qxw4.mjs";
-import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-B-SJ7p6p.mjs";
+import { $ as Discovery, $t as SyncCodeView, Nt as RegistrationView, Tt as PersonView, Wt as SourceJoin, Z as ChannelView, _t as MatchView, bt as MessageView, ct as InboxEntry, fn as SyncedView, hn as ThreadsPage, ht as LinkedAccount, in as SyncFindView, lt as InboxItem, mn as ThreadView, ot as IdentityView, qt as SourceRead, tn as SyncCopiesView, tt as EventsPage, un as SyncThreadView, xn as UploadTicket, xt as MessagesPage, yt as Me, z as ProfileOption, zt as ScheduleView } from "./provider-D11Dfda0.mjs";
+import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-CWmd4UH-.mjs";
 //#region src/server/backend-http.d.ts
 type HttpOptions = {
   /**
@@ -194,7 +194,19 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     watchers: RegistrationView[];
   }>;
   register: (caller: Caller, input: {
+    watch: Record<string, {
+      tail: string;
+      when: "enters" | "matches";
+    }>;
+    sync?: {
+      key: string;
+      platform: string;
+      signIn: boolean;
+    }[] | undefined;
     url?: string | null | undefined;
+    path?: null | undefined;
+    branch?: null | undefined;
+  } | {
     watch: Record<string, {
       tail: string;
       when: "enters" | "matches";
@@ -204,6 +216,9 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
       platform: string;
       signIn: boolean;
     }[] | undefined;
+    url?: null | undefined;
+    path: string;
+    branch?: string | null | undefined;
   }, signal: AbortSignal) => Promise<RegistrationView>;
   matches: (caller: Caller, input: {
     limit?: number | undefined;
@@ -245,6 +260,11 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     target: string;
     limit?: number | undefined;
   }, signal: AbortSignal) => Promise<SourceRead>;
+  joinSource: (caller: Caller, input: {
+    key: string;
+  } & {
+    target: string;
+  }, signal: AbortSignal) => Promise<SourceJoin>;
   synced: (caller: Caller, input: {
     id: string;
   }, signal: AbortSignal) => Promise<SyncedView>;

package/dist/{backend-http-CDDS7MLI.mjs → backend-http-CG5y03UP.mjs}

@@ -1,9 +1,9 @@
 import "./files-SniSmeEr.mjs";
 import "./schemas-Be08nyfW.mjs";
-import { K as routes, k as RegisterBody, n as compileWatcher, o as METHODS, t as canonicalWatchers } from "./watchers-hash-qlnbKQQ0.mjs";
-import { n as createBoardClient, t as BoardError } from "./client-BA-J7usH.mjs";
+import { k as RegisterBody, n as compileWatcher, o as METHODS, q as routes, t as canonicalWatchers } from "./watchers-hash-DYwvkhdX.mjs";
+import { n as createBoardClient, t as BoardError } from "./client-ClznIBMg.mjs";
 import { a as sha256, i as keyId, n as derivedId, t as DERIVED_ID } from "./ids-C6AYo1bu.mjs";
-import { a as forbidden, o as json, t as HttpError } from "./errors-DX3hpwWt.mjs";
+import { a as forbidden, o as json, t as HttpError } from "./errors-CQ-fwxM3.mjs";
 //#region src/server/backend-http.ts
 /** A watcher's or client's name is the profile its writes are by. */
 const PROFILE = /^[A-Za-z][A-Za-z0-9-]{0,31}$/;
@@ -308,6 +308,10 @@ function createHttp(url, options, environment) {
 			if ("self" in caller && bound().sync.some((entry) => entry.key === input.key)) return bound().readSource(input.key, input.target, input.limit ?? 50);
 			return remoteCall("readSource", caller, input, signal);
 		},
+		async joinSource(caller, input, signal) {
+			if ("self" in caller && bound().sync.some((entry) => entry.key === input.key)) return bound().joinSource(input.key, input.target);
+			return remoteCall("joinSource", caller, input, signal);
+		},
 		async synced(caller, input, signal) {
 			const { targets } = await remoteCall("synced", caller, input, signal);
 			return { targets: await Promise.all(targets.map(async (row) => ({
@@ -350,17 +354,32 @@ function createHttp(url, options, environment) {
 	};
 	/** Only an https URL can be woken; anything else pulls on its own. */
 	const wakeable = (here) => here?.startsWith("https://") ? here : null;
+	/**
+	* Where the remote wakes this board: on a board that wakes by path, the path on this project,
+	* which gets through its Deployment Protection, from production or from a preview of a branch,
+	* which it names; anywhere else (off Vercel, development, a custom environment), its URL.
+	*/
+	async function wakeAt(here) {
+		const env = typeof process !== "undefined" && process.env.VERCEL === "1" ? process.env : null;
+		const environment = env?.VERCEL_TARGET_ENV || env?.VERCEL_ENV;
+		const branch = environment === "preview" ? env?.VERCEL_GIT_COMMIT_REF || null : null;
+		if (!here || environment !== "production" && !branch || !(await discovery()).wake_by_path) return { url: here };
+		return {
+			path: new URL(here).pathname,
+			...branch ? { branch } : {}
+		};
+	}
 	let last = null;
 	let registering = null;
 	/** Registers this board's watchers with the remote, as itself, replacing its last registration. */
 	async function register(here) {
 		const current = await watchersHash();
 		if (last && last.url === here && last.result.hash === current && Date.now() - last.at < REGISTER_EVERY_MS) return last.result;
-		registering ??= own.register({
-			url: here,
+		registering ??= wakeAt(here).then((where) => own.register({
+			...where,
 			watch: specs,
 			...sync.length > 0 ? { sync } : {}
-		}).then((result) => {
+		})).then((result) => {
 			last = {
 				url: here,
 				at: Date.now(),

package/dist/{backend-http-BjH8jMDi.mjs → backend-http-c-VHpUOs.mjs}

@@ -1,5 +1,5 @@
-import { t as BoardError } from "./client-BA-J7usH.mjs";
-import { t as createHttp } from "./backend-http-CDDS7MLI.mjs";
+import { t as BoardError } from "./client-ClznIBMg.mjs";
+import { t as createHttp } from "./backend-http-CG5y03UP.mjs";
 import { execFile } from "node:child_process";
 import { createHash } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
@@ -120,7 +120,15 @@ const expiry = (token) => {
 		return Date.now() + 3e5;
 	}
 };
-const cacheFile = (audience) => join(configDir(), "tokens", `${createHash("sha256").update(audience).digest("hex").slice(0, 32)}.json`);
+/**
+* Where `audience`'s token is cached: one per board, and with a login the Vercel CLI hands over
+* (`VERCEL_AUTH_TOKEN`), one per login too, since it can be someone else's than `vercel login`'s.
+*/
+const cacheFile = (audience) => {
+	const login = process.env.VERCEL_AUTH_TOKEN;
+	const key = login ? `${audience}\n${login}` : audience;
+	return join(configDir(), "tokens", `${createHash("sha256").update(key).digest("hex").slice(0, 32)}.json`);
+};
 async function readCache(audience) {
 	try {
 		const cached = JSON.parse(await readFile(cacheFile(audience), "utf8"));
@@ -137,6 +145,11 @@ async function writeCache(audience, cached) {
 	await writeFile(cacheFile(audience), JSON.stringify(cached), { mode: 384 });
 }
 /**
+* Your Vercel login: what the Vercel CLI hands a CLI it runs, as `vercel board` (`VERCEL_AUTH_TOKEN`,
+* from its `--token` or its own login), or else what `vercel login` saved.
+*/
+const vercelLogin = () => process.env.VERCEL_AUTH_TOKEN ? Promise.resolve(process.env.VERCEL_AUTH_TOKEN) : getVercelToken();
+/**
 * A person's token: their Vercel CLI login mints a development token for the
 * project the board's host is a deployment of, exchanged so its audience is the
 * board's URL. Cached on disk for its 12-hour life.
@@ -144,7 +157,7 @@ async function writeCache(audience, cached) {
 async function personToken(audience, discovery) {
 	const cached = await readCache(audience);
 	if (cached && cached.name === void 0) {
-		const user = await getVercelToken().then(vercelUser).catch(() => null);
+		const user = await vercelLogin().then(vercelUser).catch(() => null);
 		const filled = {
 			...cached,
 			name: user?.name ?? null,
@@ -155,7 +168,7 @@ async function personToken(audience, discovery) {
 	}
 	if (cached) return cached;
 	if (!discovery.project_id) throw new BoardError("no_project", `the board at ${discovery.url} doesn't know its Vercel project`, 0);
-	const authToken = await getVercelToken().catch(() => null);
+	const authToken = await vercelLogin().catch(() => null);
 	const project = await boardProject(audience, discovery, authToken);
 	let development;
 	try {
@@ -517,7 +530,7 @@ async function projectBypass(url, host, doFetch) {
 	const blocked = (why) => new BoardError("protected", `${url} is behind Vercel Deployment Protection, and your Vercel login ${why}, or set VERCEL_AUTOMATION_BYPASS_SECRET (${WHERE})`, 0);
 	let api;
 	try {
-		const token = await getVercelToken();
+		const token = await vercelLogin();
 		api = async (method, path) => {
 			const response = await doFetch(`https://api.vercel.com${path}`, {
 				method,

package/dist/backend-http.d.mts

@@ -1,4 +1,4 @@
-import { n as HttpOptions, t as HttpBackend } from "./backend-http-7cNb8nJI.mjs";
+import { n as HttpOptions, t as HttpBackend } from "./backend-http-BfWQfvqB.mjs";
 //#region src/backend-http/index.default.d.ts
 /**
  * The board at `url`, which keeps the log. Outside Node there's no environment to find it or a

package/dist/backend-http.mjs

@@ -1,2 +1,2 @@
-import { t as http } from "./index.default-jkA7eFFe.mjs";
+import { t as http } from "./index.default-C3luVnd-.mjs";
 export { http };

package/dist/backend-http.node.d.mts

@@ -1,4 +1,4 @@
-import { n as HttpOptions, t as HttpBackend } from "./backend-http-7cNb8nJI.mjs";
+import { n as HttpOptions, t as HttpBackend } from "./backend-http-BfWQfvqB.mjs";
 //#region src/backend-http/index.d.ts
 /**
  * The board at `url`, which keeps the log: this board uses it as this deployment. Without a

package/dist/backend-http.node.mjs

@@ -1,2 +1,2 @@
-import { t as http } from "./backend-http-BjH8jMDi.mjs";
+import { t as http } from "./backend-http-c-VHpUOs.mjs";
 export { http };

package/dist/{chat-provider-DNJQyajS.d.mts → chat-provider-D0k3y8zY.d.mts}

@@ -1,5 +1,5 @@
 import { d as ExternalFile, f as ExternalLink, l as ExternalAuthor, t as Actor } from "./folds-CRYY14kc.mjs";
-import { M as SyncRoot, O as ProviderEvent, Wt as SourceRead, a as ProviderOptions, c as ReceivedEvent, d as ResolvedTarget, i as ProviderFile, n as FileDelivery, o as ProviderPost, p as SyncProvider, r as ProviderDelivery, s as Receive, t as FetchedLink, y as SyncFn } from "./provider-B0b9Qxw4.mjs";
+import { M as SyncRoot, O as ProviderEvent, Wt as SourceJoin, a as ProviderOptions, c as ReceivedEvent, d as ResolvedTarget, i as ProviderFile, n as FileDelivery, o as ProviderPost, p as SyncProvider, qt as SourceRead, r as ProviderDelivery, s as Receive, t as FetchedLink, y as SyncFn } from "./provider-D11Dfda0.mjs";
 import { Adapter, Author, FileUpload, Message, ReactionEvent } from "chat";
 //#region src/sync/types.d.ts
 declare function externalAuthor(platform: string, author: Author): ExternalAuthor;
@@ -45,6 +45,8 @@ type ChatTransport = Omit<ProviderOptions, 'uploadsFiles'> & {
   read?(target: string, options: {
     limit: number;
   }): Promise<SourceRead>;
+  /** Adds the app to a channel so `read` can read it. */
+  join?(target: string): Promise<SourceJoin>;
   avatar?(message: Message): Promise<string | null>;
   fetchRoot?(thread: string): Promise<Omit<SyncRoot, 'raw'> & {
     raw?: unknown;
@@ -124,6 +126,7 @@ declare abstract class ChatSyncProvider<E extends ProviderEvent = ProviderEvent>
   read(target: string, options: {
     limit: number;
   }): Promise<SourceRead>;
+  join(target: string): Promise<SourceJoin>;
   fetchFile(file: ExternalFile): Promise<Uint8Array | null>;
   post(target: string, kind: ResolvedTarget['kind'], { as: _sender, files, ...body }: ProviderPost): Promise<ProviderDelivery>;
   whoAmI(token: string): Promise<{

package/dist/{chat-provider-YHy-WbrB.mjs → chat-provider-DnHibqnM.mjs}

@@ -1,5 +1,5 @@
 import "./external-BV_cUncs.mjs";
-import { n as ResolvedTarget, r as SyncProvider } from "./provider-B3DpYSDq.mjs";
+import { n as ResolvedTarget, r as SyncProvider } from "./provider-poIkXapd.mjs";
 import { n as userTokensOf } from "./users-yryHKFMo.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Chat, stringifyMarkdown } from "chat";
@@ -312,6 +312,9 @@ var ChatSyncProvider = class extends SyncProvider {
 	async read(target, options) {
 		return this.transport.read ? this.transport.read(target, options) : super.read(target, options);
 	}
+	async join(target) {
+		return this.transport.join ? this.transport.join(target) : super.join(target);
+	}
 	async fetchFile(file) {
 		const fetch = (await this.ready()).rehydrateAttachment?.({ ...this.transport.fileToFetch?.(file) ?? file }).fetchData;
 		if (!fetch) return null;

package/dist/cli-embedded.d.mts

@@ -0,0 +1,47 @@
+import "./provider-D11Dfda0.mjs";
+import { d as Board } from "./backend-CWmd4UH-.mjs";
+import "./index-DsMPCv_K.mjs";
+//#region src/cli/main.d.ts
+/** The command word: the first argument that isn't a flag or a string flag's value. */
+export declare function commandWord(args: string[]): string | undefined;
+//#endregion
+//#region src/cli/embedded.d.ts
+/**
+ * Board's CLI as `appName` names it in help, usage, and errors (`vercel board`). An agent's hook
+ * runs it the same way, by that name. `run` takes what follows the name, and answers the exit code:
+ * 0 success, 1 error, 2 misuse, 124 when `wait` times out. It never exits the process itself. One `run`
+ * at a time: a run's flags are the CLI's while it runs.
+ */
+export declare function createApp(options: {
+  appName: string;
+}): {
+  run(args: string[]): Promise<number>;
+};
+/** Where a `vb()` command's files come from and go, and what stops it. A command that needs one it lacks says so. */
+export type VbOptions = {
+  /** A file's bytes, for `--attach`; null when there's no such file. */
+  readFile?: (path: string) => Promise<Uint8Array | null> | PromiseLike<Uint8Array | null>;
+  /** Saves a file, for `download`. */
+  writeFile?: (path: string, data: Uint8Array) => Promise<void> | PromiseLike<void>;
+  /** The text `-` reads, as stdin would hold it. */
+  stdin?: string;
+  /** Stops `tail` and `wait`, as Ctrl-C does. */
+  signal?: AbortSignal;
+  /** Commands this caller doesn't run, which answer 2: `['tail', 'wait']` for an agent's tool. */
+  refuse?: string[];
+};
+/** What a `vb()` command printed, and its exit code: 0, 1 for an error, 2 for misuse, 124 when `wait` timed out. */
+export type VbResult = {
+  code: number;
+  stdout: string;
+  stderr: string;
+};
+/**
+ * Runs the vb command `argv` (`['read', '42']`, `['reply', '42', 'on it']`) on `board`, in this
+ * process, and returns what the CLI would print. `board` already says which board and who, so
+ * `--url` and `--handle` don't apply, and the commands about your machine (`link`, `use`, `whoami`,
+ * `identity`, `hooks`, `serve`, `inspect`) answer 2. Calls run one at a time, in order, so
+ * `tail` and `wait`, which hold the rest until they end, need `options.signal`.
+ */
+export declare function vb(board: Board, argv: string[], options?: VbOptions): Promise<VbResult>;
+//#endregion

package/dist/cli-embedded.mjs

@@ -0,0 +1,64 @@
+import { n as main, r as mainWith, t as commandWord } from "./main-wB-VfTCL.mjs";
+//#region src/cli/embedded.ts
+/**
+* Board's CLI as `appName` names it in help, usage, and errors (`vercel board`). An agent's hook
+* runs it the same way, by that name. `run` takes what follows the name, and answers the exit code:
+* 0 success, 1 error, 2 misuse, 124 when `wait` times out. It never exits the process itself. One `run`
+* at a time: a run's flags are the CLI's while it runs.
+*/
+function createApp(options) {
+	return { run: (args) => main(args, {
+		name: options.appName,
+		command: options.appName,
+		commands: {}
+	}) };
+}
+const lacking = (what) => async () => {
+	throw new Error(`${what}: pass it in vb()'s options`);
+};
+let queue = Promise.resolve();
+/**
+* Runs the vb command `argv` (`['read', '42']`, `['reply', '42', 'on it']`) on `board`, in this
+* process, and returns what the CLI would print. `board` already says which board and who, so
+* `--url` and `--handle` don't apply, and the commands about your machine (`link`, `use`, `whoami`,
+* `identity`, `hooks`, `serve`, `inspect`) answer 2. Calls run one at a time, in order, so
+* `tail` and `wait`, which hold the rest until they end, need `options.signal`.
+*/
+function vb(board, argv, options = {}) {
+	const word = commandWord(argv);
+	if (word !== void 0 && options.refuse?.includes(word)) return Promise.resolve({
+		code: 2,
+		stdout: "",
+		stderr: `error: ${word} isn't available here\n`
+	});
+	if ((word === "tail" || word === "wait") && !options.signal) return Promise.resolve({
+		code: 2,
+		stdout: "",
+		stderr: `error: ${word} runs until it's stopped, and vb() runs one call at a time: pass a signal\n`
+	});
+	const result = queue.then(async () => {
+		let stdout = "";
+		let stderr = "";
+		const decoder = new TextDecoder();
+		return {
+			code: await mainWith(argv, {
+				name: "board",
+				commands: {}
+			}, {
+				board,
+				write: (chunk) => void (stdout += typeof chunk === "string" ? chunk : decoder.decode(chunk, { stream: true })),
+				error: (chunk) => void (stderr += chunk),
+				readFile: options.readFile ? async (path) => options.readFile(path) : lacking("--attach reads files"),
+				writeFile: options.writeFile ? async (path, data) => options.writeFile(path, data) : lacking("download saves files"),
+				stdin: options.stdin !== void 0 ? async () => options.stdin : lacking("- reads stdin"),
+				...options.signal ? { signal: options.signal } : {}
+			}),
+			stdout,
+			stderr
+		};
+	});
+	queue = result.catch(() => {});
+	return result;
+}
+//#endregion
+export { commandWord, createApp, vb };