@vercel/board 0.28.0 → 0.29.0

package/dist/{a2-B0_VlbtC.mjs → a2-HUbQJ0RD.mjs}

@@ -1,27 +1,26 @@
-import { n as DIRECT_UPLOAD_BYTES_MAX, r as IMPORT_BYTES_MAX, t as ATTACHMENT_BYTES_MAX } from "./files-SniSmeEr.mjs";
-import { _ as RemoteWatcherId, b as actorKind, i as Attachment, x as platformAvatar } from "./schemas-Be08nyfW.mjs";
-import "./external-BV_cUncs.mjs";
-import { a as METHODS, d as VERSION, f as SYNC, n as compileWatcher, r as hasCriteria, t as canonicalWatchers } from "./watchers-hash-7DJU9b-n.mjs";
+import { r as IMPORT_BYTES_MAX, t as ATTACHMENT_BYTES_MAX } from "./files-SniSmeEr.mjs";
+import { _ as RemoteWatcherId, b as actorKind, x as platformAvatar } from "./schemas-DBmUO6pr.mjs";
+import "./external-D3p5T57R.mjs";
+import { a as METHODS, d as VERSION, f as SYNC, n as compileWatcher, r as hasCriteria, t as canonicalWatchers } from "./watchers-hash-BDhLVkV5.mjs";
 import { r as duration, t as BoardError } from "./client-D0Px7KzF.mjs";
 import { i as isKeyIdOf, r as derivedId, t as waitUntil } from "./wait-until-Dw4XrIDQ.mjs";
 import { a as forbidden, c as toErrorResponse, i as duplicateId, r as badRequest, s as notFound, t as HttpError } from "./errors-CusN4x2l.mjs";
 import { t as own } from "./own-OwgPWdmh.mjs";
 import { n as replaceMentions } from "./mentions-CB6ShY4R.mjs";
-import { _ as FULL_ACCESS, i as authenticates, v as authorize } from "./auth-lTkOgvcE.mjs";
-import { a as resolveMentions, n as actorSeen } from "./actors-BLXVp4oZ.mjs";
-import { n as MIDDLEWARE_ACTOR, t as DroppedError } from "./middleware-ChKM1zuu.mjs";
-import { n as syncTarget, r as withEmailMentions } from "./targets-C-wdR5wP.mjs";
+import { _ as FULL_ACCESS, i as authenticates, v as authorize } from "./auth-JO22iIwr.mjs";
+import { a as resolveMentions, n as actorSeen } from "./actors-DcJhFbwJ.mjs";
+import { n as MIDDLEWARE_ACTOR, t as DroppedError } from "./middleware-CXjEeef4.mjs";
+import { n as syncTarget, r as withEmailMentions } from "./targets-Cgjs29T0.mjs";
 import { t as A2Error } from "./session-clear-wHd5GCpZ-BnKSxReK.mjs";
 import { a as reducer } from "./reducer-CjmvZSAb-D_OSISmj.mjs";
-import { _ as BOARD_SESSION, a as IDENTITY_SESSION, c as SCHEDULES_SESSION, d as inboxContract, f as inboxSession, g as watchSession, h as watchContract, l as boardContract, m as schedulesContract, n as channelsReducer, o as INBOXES_SESSION, p as registryContract, r as identityCodesReducer, s as REGISTRY_SESSION, t as actorsReducer, u as identityContract } from "./reducers-BcmSs4qf.mjs";
+import { _ as BOARD_SESSION, a as IDENTITY_SESSION, c as SCHEDULES_SESSION, d as inboxContract, f as inboxSession, g as watchSession, h as watchContract, l as boardContract, m as schedulesContract, n as channelsReducer, o as INBOXES_SESSION, p as registryContract, r as identityCodesReducer, s as REGISTRY_SESSION, t as actorsReducer, u as identityContract } from "./reducers-DJzVpXwM.mjs";
 import { n as createServer, t as consumer } from "./server-DtFrWxi3-Boa6gdWO.mjs";
-import { a as linkedTo, i as iso, n as foldMessages, o as personOf, t as foldActors } from "./folds-Dyjput8M.mjs";
-import { t as concernedMessageId } from "./project-DMDST9kl.mjs";
-import { t as TABLES_CONSUMER } from "./sql-U9WTxrwJ.mjs";
+import { a as linkedTo, i as iso, n as foldMessages, o as personOf, t as foldActors } from "./folds-BDMSxBUf.mjs";
+import { c as readUpload, i as finishUpload, l as startUpload, n as attachmentNotFound, t as attachmentBody, u as writeUpload } from "./blob-DdbpJqN1.mjs";
+import { t as concernedMessageId } from "./project-CBXlLftU.mjs";
+import { t as TABLES_CONSUMER } from "./sql-D4Z_efJX.mjs";
 import { t as afterRetry } from "./attempts-HXcskN1w.mjs";
 import { createHash, randomBytes } from "node:crypto";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import { dirname, join } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { lookup } from "node:dns";
 import { request } from "node:https";
@@ -36,181 +35,6 @@ async function idempotentId(...parts) {
 	return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
 }
 //#endregion
-//#region src/server/blob.ts
-/** Files in memory, for tests: forgets everything when the process ends. */
-function memoryBlob() {
-	const files = /* @__PURE__ */ new Map();
-	return {
-		put: async (key, data, contentType) => void files.set(key, {
-			data: data.slice(),
-			contentType
-		}),
-		get: async (key) => files.get(key) ?? null
-	};
-}
-/** Files on disk, for development and `vb serve`: under `dir`, `.a2/attachments` by default. */
-function fsBlob(dir = ".a2/attachments") {
-	const path = (key) => join(dir, ...key.split("/"));
-	return {
-		async put(key, data, contentType) {
-			await mkdir(dirname(path(key)), { recursive: true });
-			await writeFile(path(key), data);
-			await writeFile(`${path(key)}.type`, contentType);
-		},
-		async get(key) {
-			try {
-				const [data, contentType] = await Promise.all([readFile(path(key)), readFile(`${path(key)}.type`, "utf8")]);
-				return {
-					data: new Uint8Array(data),
-					contentType
-				};
-			} catch {
-				return null;
-			}
-		}
-	};
-}
-const dataKey = (id) => `board/attachments/${id}`;
-/** A direct upload the board signed, until it's finished: what it's called, and who may finish it. */
-const ticketKey = (id) => `board/uploads/${id}.json`;
-const metaKey = (id) => `board/attachments/${id}.json`;
-/** `shot.png`, as the board stores a name: no paths, no control characters. */
-function fileName(name) {
-	return (name ?? "").split(/[\\/]/).pop().replace(/[\u0000-\u001f\u007f]/g, "").trim().slice(0, 255) || "file";
-}
-/** `image/png`, or `application/octet-stream` when the type isn't one. */
-function mediaType(type) {
-	const value = (type ?? "").split(";")[0].trim().toLowerCase();
-	return /^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/.test(value) && value.length <= 255 ? value : "application/octet-stream";
-}
-/** A board without a blob store keeps no files: every file route says so. */
-const noBlob = () => new HttpError(501, "no_files", "this board keeps no files: pass `blob` to `a2()`");
-/** 128 random bits, base64url, drawn again when they'd start with `-`, which a command line reads as a flag. */
-function attachmentId() {
-	for (;;) {
-		const id = randomBytes(16).toString("base64url");
-		if (!id.startsWith("-")) return id;
-	}
-}
-/**
-* Stores an upload under a fresh ID, with its metadata beside it. `uploadedBy`
-* is the principal that sent it, who can read it before any message carries it.
-* `max` is the most it can be: `ATTACHMENT_BYTES_MAX` unless the board's own sync imports it.
-*/
-async function writeUpload(blob, input, max = ATTACHMENT_BYTES_MAX) {
-	if (!blob) throw noBlob();
-	if (input.data.byteLength === 0) throw badRequest("the file is empty");
-	if (input.data.byteLength > max) throw new HttpError(413, "too_large", `attachments are at most ${max / 1024 / 1024} MB`);
-	const attachment = {
-		id: attachmentId(),
-		name: fileName(input.name),
-		type: mediaType(input.type),
-		size: input.data.byteLength
-	};
-	await blob.put(dataKey(attachment.id), input.data, attachment.type);
-	const meta = input.uploadedBy === void 0 ? attachment : {
-		...attachment,
-		uploadedBy: input.uploadedBy
-	};
-	await blob.put(metaKey(attachment.id), new TextEncoder().encode(JSON.stringify(meta)), "application/json");
-	return attachment;
-}
-async function bytes(data) {
-	return data instanceof Uint8Array ? data : new Uint8Array(await new Response(data).arrayBuffer());
-}
-const attachmentNotFound = (id) => notFound(`no attachment: ${id}`, "attachment_not_found");
-/**
-* An upload's metadata, as the board recorded it, never what a request says,
-* and who uploaded it: null for files the board imported itself, or stored
-* before it recorded that.
-*/
-async function readUpload(blob, id) {
-	if (!blob) throw noBlob();
-	const found = Attachment.shape.id.safeParse(id).success ? await blob.get(metaKey(id)) : null;
-	if (!found) throw attachmentNotFound(id);
-	const meta = JSON.parse(new TextDecoder().decode(await bytes(found.data)));
-	return {
-		attachment: Attachment.parse(meta),
-		uploadedBy: typeof meta.uploadedBy === "string" ? meta.uploadedBy : null
-	};
-}
-/** An attachment's bytes as the store keeps them, a stream or the bytes, for board() to serve. */
-async function attachmentBody(blob, id) {
-	if (!blob) throw noBlob();
-	const found = await blob.get(dataKey(id));
-	if (!found) throw attachmentNotFound(id);
-	return found.data;
-}
-/** How long a direct upload's URL takes bytes: long enough for 100 MB on a slow link. */
-const DIRECT_UPLOAD_TTL_MS = 18e5;
-const noDirectUploads = () => new HttpError(501, "no_direct_uploads", `this board's blob store can't take direct uploads, so files are at most ${ATTACHMENT_BYTES_MAX / 1024 / 1024} MB`);
-/**
-* Starts a direct upload: a fresh ID, and a URL in the store to `PUT` its bytes to. The board
-* keeps what the request said the file is until `finishUpload` checks the store has it.
-*/
-async function startUpload(blob, input) {
-	if (!blob) throw noBlob();
-	if (!blob.uploadUrl || !blob.head) throw noDirectUploads();
-	if (input.size > 104857600) throw new HttpError(413, "too_large", `direct uploads are at most ${DIRECT_UPLOAD_BYTES_MAX / 1024 / 1024} MB`);
-	const expires = new Date(Date.now() + DIRECT_UPLOAD_TTL_MS);
-	const ticket = {
-		id: attachmentId(),
-		name: fileName(input.name),
-		type: mediaType(input.type),
-		size: input.size,
-		uploadedBy: input.uploadedBy,
-		expiresAt: expires.toISOString()
-	};
-	await blob.put(ticketKey(ticket.id), new TextEncoder().encode(JSON.stringify(ticket)), "application/json");
-	const { url, headers } = await blob.uploadUrl(dataKey(ticket.id), {
-		contentType: ticket.type,
-		maxBytes: ticket.size,
-		expiresAt: expires
-	});
-	return {
-		id: ticket.id,
-		url,
-		headers: {
-			...headers,
-			"content-type": ticket.type
-		},
-		expiresAt: ticket.expiresAt
-	};
-}
-/**
-* Finishes a direct upload: once the store has exactly the bytes its start said, the board records
-* the attachment, as `writeUpload` does. Only its uploader may finish it; a second finish answers
-* the same attachment. It never reads the record before writing it: a store with a cache (Vercel
-* Blob's CDN) would keep that miss, and the post that names the file would find nothing.
-*/
-async function finishUpload(blob, id, principal) {
-	if (!blob) throw noBlob();
-	const found = Attachment.shape.id.safeParse(id).success ? await blob.get(ticketKey(id)) : null;
-	const ticket = found ? JSON.parse(new TextDecoder().decode(await bytes(found.data))) : null;
-	if (!ticket || ticket.uploadedBy !== principal) throw notFound(`no upload: ${id}`, "upload_not_found");
-	if (!blob.head) throw noDirectUploads();
-	const stored = await blob.head(dataKey(id));
-	if (!stored) throw new HttpError(409, "not_uploaded", `nothing's been uploaded for ${id} yet: PUT the file to its URL first`);
-	if (stored.size !== ticket.size) throw badRequest(`the store has ${stored.size} bytes for ${id}, but its upload said ${ticket.size}`, "size_mismatch");
-	const attachment = {
-		id,
-		name: ticket.name,
-		type: ticket.type,
-		size: stored.size
-	};
-	try {
-		await blob.put(metaKey(id), new TextEncoder().encode(JSON.stringify({
-			...attachment,
-			uploadedBy: principal
-		})), "application/json");
-	} catch (error) {
-		const done = await blob.get(metaKey(id)).catch(() => null);
-		if (!done) throw error;
-		return Attachment.parse(JSON.parse(new TextDecoder().decode(await bytes(done.data))));
-	}
-	return attachment;
-}
-//#endregion
 //#region src/server/feed.ts
 /** Bookkeeping events, shown only with `all`: who's who, and delivery receipts. */
 const HIDDEN = /* @__PURE__ */ new Set([
@@ -3264,11 +3088,11 @@ function build(options, binding) {
 			const { message, replies } = await methods.message(caller, { id }, signal);
 			return { targets: await binding.typing([message, ...replies], status) };
 		},
-		async readSource(caller, { key, target, limit }) {
+		async readSource(caller, { key, target, limit, after }) {
 			if (!binding.sync.some((entry) => entry.key === key)) throw notFound(`this board doesn't run sync entry ${key}: read it where its sync runs`, "not_synced_here");
 			const { principal } = await identityOf(caller);
 			if (!principal.access.everywhere("manage")) throw forbidden("this token can't read a source: it needs manage in every channel");
-			return binding.readSource(key, target, limit ?? 50);
+			return binding.readSource(key, target, limit ?? 50, after ?? null);
 		},
 		async joinSource(caller, { key, target }) {
 			if (!binding.sync.some((entry) => entry.key === key)) throw notFound(`this board doesn't run sync entry ${key}: join it where its sync runs`, "not_synced_here");
@@ -4085,4 +3909,4 @@ function a2(options = {}) {
 	return backend;
 }
 //#endregion
-export { fsBlob as n, memoryBlob as r, a2 as t };
+export { a2 as t };

package/dist/access.d.mts

@@ -1,6 +1,6 @@
 import { a as Grant, i as ChannelPattern, n as AccessSummary, o as Permission, r as Can, t as Access } from "./access-CV96SYgr.mjs";
 import { _ as oidc, a as CallerRequest, c as HostPrincipal, d as OidcTokensOptions, f as Principal, g as githubActions, h as compileRules, i as AuthenticateContext, l as IssuerConfig, m as RuleFunction, n as AccessRule, o as Claims, p as PrincipalKind, r as Authenticate, t as AccessFunction, u as Known, v as vercelProject } from "./auth-CU56Q2Xh.mjs";
-import { C as Author, t as Actor } from "./folds-jS9wlh9_.mjs";
+import { C as Author, t as Actor } from "./folds-ZkHM4M-v.mjs";
 //#region src/server/tokens.d.ts
 /**
  * The OIDC tokens made out to this board: a request's bearer token, from Vercel (people and

package/dist/access.mjs

@@ -1,4 +1,4 @@
-import { a as compileRules, c as githubActions, h as vercelProject, p as oidc } from "./auth-lTkOgvcE.mjs";
-import { i as resolveActor } from "./actors-BLXVp4oZ.mjs";
-import { t as oidcTokens } from "./tokens-BuCU-61R.mjs";
+import { a as compileRules, c as githubActions, h as vercelProject, p as oidc } from "./auth-JO22iIwr.mjs";
+import { i as resolveActor } from "./actors-DcJhFbwJ.mjs";
+import { t as oidcTokens } from "./tokens-CC3izSNr.mjs";
 export { compileRules, githubActions, oidc, oidcTokens, resolveActor, vercelProject };

package/dist/{actors-BLXVp4oZ.mjs → actors-DcJhFbwJ.mjs}

@@ -1,8 +1,8 @@
-import { C as toStorable } from "./schemas-Be08nyfW.mjs";
+import { C as toStorable } from "./schemas-DBmUO6pr.mjs";
 import { r as badRequest } from "./errors-CusN4x2l.mjs";
 import { t as own } from "./own-OwgPWdmh.mjs";
 import { t as extractMentions } from "./mentions-CB6ShY4R.mjs";
-import { y as parseScope } from "./auth-lTkOgvcE.mjs";
+import { y as parseScope } from "./auth-JO22iIwr.mjs";
 //#region src/server/actors.ts
 /** Agents whose avatars the board serves itself. */
 const KNOWN_AGENTS = [

package/dist/{auth-lTkOgvcE.mjs → auth-JO22iIwr.mjs}

@@ -1,4 +1,4 @@
-import { c as ChannelPath, v as SCOPE_MAX } from "./schemas-Be08nyfW.mjs";
+import { c as ChannelPath, v as SCOPE_MAX } from "./schemas-DBmUO6pr.mjs";
 import { a as forbidden, l as unauthorized } from "./errors-CusN4x2l.mjs";
 //#region src/server/access.ts
 /**

package/dist/{backend-ZKYTe3xa.d.mts → backend-CPC_vyOo.d.mts}

@@ -1,9 +1,9 @@
 import { t as Access } from "./access-CV96SYgr.mjs";
 import { m as RuleFunction, n as AccessRule, r as Authenticate, s as Granted, t as AccessFunction, u as Known } from "./auth-CU56Q2Xh.mjs";
-import { A as Labels, C as Author, t as Actor, u as ExternalEvent, x as Attachment } from "./folds-jS9wlh9_.mjs";
-import { A as InboxItem, At as SyncRootsQuery, B as Me, C as EventsQuery, D as IdentityView, Et as SyncImportBody, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, L as LinkedQuery, Lt as ThreadsQuery, M as InboxPushBody, Mt as SyncUnlinkBody, N as InboxQuery, Nt as SyncedView, O as InboxAckBody, Ot as SyncReceiptBody, P as LabelBody, Q as RegisterBody, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, U as MessagesQuery, V as MessageView, Vt as UploadStartBody, X as ReactBody, _ as BoardEventView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, ft as SourceJoinBody, gt as SyncAccountBody, ht as SourceReadQuery, j as InboxNextQuery, jt as SyncThreadView, k as InboxEntry, m as AckBody, mt as SourceRead, o as ProfileOption, ot as ScheduleView, q as PostBody, rt as ScheduleBody, st as SchedulesQuery, t as BoardClient, v as ChannelView, wt as SyncFindQuery, x as EditBody, xt as SyncCopiesQuery, yt as SyncCodeBody, z as MatchesQuery, zt as TypingBody } from "./client-xLxeDz0f.mjs";
-import { t as HttpError } from "./errors-CB4tnZGz.mjs";
-import { p as SyncProvider } from "./provider-Cdg1qadh.mjs";
+import { A as Labels, C as Author, t as Actor, u as ExternalEvent, x as Attachment } from "./folds-ZkHM4M-v.mjs";
+import { A as InboxItem, At as SyncRootsQuery, B as Me, C as EventsQuery, D as IdentityView, Et as SyncImportBody, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, L as LinkedQuery, Lt as ThreadsQuery, M as InboxPushBody, Mt as SyncUnlinkBody, N as InboxQuery, Nt as SyncedView, O as InboxAckBody, Ot as SyncReceiptBody, P as LabelBody, Q as RegisterBody, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, U as MessagesQuery, V as MessageView, Vt as UploadStartBody, X as ReactBody, _ as BoardEventView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, ft as SourceJoinBody, gt as SyncAccountBody, ht as SourceReadQuery, j as InboxNextQuery, jt as SyncThreadView, k as InboxEntry, m as AckBody, mt as SourceRead, o as ProfileOption, ot as ScheduleView, q as PostBody, rt as ScheduleBody, st as SchedulesQuery, t as BoardClient, v as ChannelView, wt as SyncFindQuery, x as EditBody, xt as SyncCopiesQuery, yt as SyncCodeBody, z as MatchesQuery, zt as TypingBody } from "./client-BqAjk0Q4.mjs";
+import { t as HttpError } from "./errors-DDktVeUa.mjs";
+import { p as SyncProvider } from "./provider-DmSTp9lI.mjs";
 import { z } from "zod";
 //#region src/api/protocol.d.ts
 type Input<S extends z.ZodType> = NonNullable<z.output<S>>;
@@ -616,7 +616,7 @@ type BoardBinding = {
    * Reads a platform channel or thread with sync entry `key`'s app, which only board() has: what
    * `readSource` answers. 404 `not_synced_here` for an entry it doesn't run.
    */
-  readSource(key: string, target: string, limit: number): Promise<SourceRead>;
+  readSource(key: string, target: string, limit: number, after: string | null): Promise<SourceRead>;
   /** Adds sync entry `key`'s app to a channel, where it opted in: what `joinSource` answers. 404 `not_synced_here` likewise. */
   joinSource(key: string, target: string): Promise<SourceJoin>;
   /**

package/dist/backend-a2/blob-vercel.d.mts

@@ -1,4 +1,4 @@
-import { t as BlobStore } from "../blob-B-9AvYis.mjs";
+import { t as BlobStore } from "../blob-DmiQjrYy.mjs";
 //#region src/blob/vercel.d.ts
 export declare function vercelBlob(options?: {
   token?: string;

package/dist/backend-a2/contract.d.mts

@@ -1,4 +1,4 @@
-import { A as Labels, C as Author, D as Handle, E as Emoji, M as MessageId, N as MessageText, O as LabelKey, S as AttachmentId, T as ChannelPath, _ as BoardEvents, b as ActorKind, g as BoardEvent, h as BOARD_SESSION, i as ChannelsState, j as MESSAGE_TEXT_MAX, k as LabelValue, l as ExternalAuthor, m as Origin, n as ActorsState, o as Message, r as Channel, s as MessagesState, t as Actor, v as ATTACHMENTS_PER_MESSAGE_MAX, w as CHANNEL_PATH_MAX, x as Attachment, y as ActorId } from "../folds-jS9wlh9_.mjs";
+import { A as Labels, C as Author, D as Handle, E as Emoji, M as MessageId, N as MessageText, O as LabelKey, S as AttachmentId, T as ChannelPath, _ as BoardEvents, b as ActorKind, g as BoardEvent, h as BOARD_SESSION, i as ChannelsState, j as MESSAGE_TEXT_MAX, k as LabelValue, l as ExternalAuthor, m as Origin, n as ActorsState, o as Message, r as Channel, s as MessagesState, t as Actor, v as ATTACHMENTS_PER_MESSAGE_MAX, w as CHANNEL_PATH_MAX, x as Attachment, y as ActorId } from "../folds-ZkHM4M-v.mjs";
 import { l as Reducer, n as Contract } from "../reducer-CYPHsSmd-BQIfozGi.mjs";
 import { z } from "zod";
 //#region src/contract/files.d.ts

package/dist/backend-a2/contract.mjs

@@ -1,5 +1,5 @@
 import { n as DIRECT_UPLOAD_BYTES_MAX, r as IMPORT_BYTES_MAX, t as ATTACHMENT_BYTES_MAX } from "../files-SniSmeEr.mjs";
-import { a as AttachmentId, c as ChannelPath, d as LabelKey, f as LabelValue, g as MessageText, h as MessageId, i as Attachment, l as Emoji, m as MESSAGE_TEXT_MAX, n as ActorId, o as Author, p as Labels, r as ActorKind, s as CHANNEL_PATH_MAX, t as ATTACHMENTS_PER_MESSAGE_MAX, u as Handle } from "../schemas-Be08nyfW.mjs";
-import { o as Origin } from "../external-BV_cUncs.mjs";
-import { _ as BOARD_SESSION, i as messagesReducer, l as boardContract, n as channelsReducer, t as actorsReducer } from "../reducers-BcmSs4qf.mjs";
+import { a as AttachmentId, c as ChannelPath, d as LabelKey, f as LabelValue, g as MessageText, h as MessageId, i as Attachment, l as Emoji, m as MESSAGE_TEXT_MAX, n as ActorId, o as Author, p as Labels, r as ActorKind, s as CHANNEL_PATH_MAX, t as ATTACHMENTS_PER_MESSAGE_MAX, u as Handle } from "../schemas-DBmUO6pr.mjs";
+import { o as Origin } from "../external-D3p5T57R.mjs";
+import { _ as BOARD_SESSION, i as messagesReducer, l as boardContract, n as channelsReducer, t as actorsReducer } from "../reducers-DJzVpXwM.mjs";
 export { ATTACHMENTS_PER_MESSAGE_MAX, ATTACHMENT_BYTES_MAX, ActorId, ActorKind, Attachment, AttachmentId, Author, BOARD_SESSION, CHANNEL_PATH_MAX, ChannelPath, DIRECT_UPLOAD_BYTES_MAX, Emoji, Handle, IMPORT_BYTES_MAX, LabelKey, LabelValue, Labels, MESSAGE_TEXT_MAX, MessageId, MessageText, Origin, actorsReducer, boardContract, channelsReducer, messagesReducer };

package/dist/backend-a2/store-memory.d.mts

@@ -1,5 +1,5 @@
 import { n as Clock } from "../store-D0MhBvg6-4Z2L0Kqd.mjs";
-import { t as BoardStore } from "../types-aCAf6lGU.mjs";
+import { t as BoardStore } from "../types-No0WdhE5.mjs";
 //#region src/store/memory.d.ts
 /**
  * A board that lives in memory, for tests: its log in A2's memory store, its

package/dist/backend-a2/store-memory.mjs

@@ -1,5 +1,5 @@
-import { r as sqlTables } from "../sql-U9WTxrwJ.mjs";
-import { t as sqliteDb } from "../sqlite-db-Ds4majtT.mjs";
+import { r as sqlTables } from "../sql-D4Z_efJX.mjs";
+import { t as sqliteDb } from "../sqlite-db-Bz2JkfCU.mjs";
 import { t as memory$1 } from "../store-memory-Bas9Uq5C.mjs";
 //#region src/store/memory.ts
 /**

package/dist/backend-a2/store-postgres.d.mts

@@ -1,4 +1,4 @@
-import { t as BoardStore } from "../types-aCAf6lGU.mjs";
+import { t as BoardStore } from "../types-No0WdhE5.mjs";
 //#region src/store/postgres-db.d.ts
 /** What the tables need of a `pg` Pool, or of anything shaped like one. */
 type PgQueryable = {

package/dist/backend-a2/store-postgres.mjs

@@ -3,7 +3,7 @@ import { m as nullProtoRecord, n as NOTIFY_TIMINGS } from "../internal-CvsrprnU-
 import { n as defaultSleep, r as pollingStream } from "../store-polling-BZt2Rf3D-BiEM6_HB.mjs";
 import { r as platformWaitUntil } from "../platform-B4TnJtWu-CwcTyKg2.mjs";
 import { t as retryableLazy } from "../retryable-lazy-DZWmHpii-Bye-W8q7.mjs";
-import { r as sqlTables } from "../sql-U9WTxrwJ.mjs";
+import { r as sqlTables } from "../sql-D4Z_efJX.mjs";
 import { a as idleLogCursor, i as idempotentReplay, n as decodeCause, r as decodeReturnedEventIds, t as cursorKeyOf } from "../store-codec-DwrWlgQx-CYxGW0aD.mjs";
 import { n as SYSTEM_CLOCK, t as RANDOM_IDS } from "../store-N8PXxDAS-BWBgzBHp.mjs";
 import { t as pollPresence } from "../store-presence-polling-JuAy2Ck2-CYpuK75X.mjs";

package/dist/backend-a2/store-redis-http.d.mts

@@ -1,4 +1,4 @@
-import { t as BoardStore } from "../types-aCAf6lGU.mjs";
+import { t as BoardStore } from "../types-No0WdhE5.mjs";
 //#region src/store/redis-http.d.ts
 export type RedisHttpOptions = {
   /** The REST endpoint, e.g. `process.env.UPSTASH_REDIS_REST_URL`. */

package/dist/backend-a2/store-redis-http.mjs

@@ -2,7 +2,7 @@ import { t as A2Error } from "../session-clear-wHd5GCpZ-BnKSxReK.mjs";
 import { n as NOTIFY_TIMINGS } from "../internal-CvsrprnU-CRY89I-b.mjs";
 import { n as defaultSleep } from "../store-polling-BZt2Rf3D-BiEM6_HB.mjs";
 import { n as SYSTEM_CLOCK, t as RANDOM_IDS } from "../store-N8PXxDAS-BWBgzBHp.mjs";
-import { n as createRedisNotifyStore, t as redisTables } from "../redis-tables-DN9PfIDi.mjs";
+import { n as createRedisNotifyStore, t as redisTables } from "../redis-tables-BJQVUspu.mjs";
 //#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/store-redis-http.js
 function redisHttpSubscriptions({ url, token, onReconnect, fallback }) {
 	const subscriptions = /* @__PURE__ */ new Map();

package/dist/backend-a2/store-redis.d.mts

@@ -1,4 +1,4 @@
-import { t as BoardStore } from "../types-aCAf6lGU.mjs";
+import { t as BoardStore } from "../types-No0WdhE5.mjs";
 //#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/store-redis.d.ts
 //#region src/store-redis-notify.d.ts
 type RedisConnection = {

package/dist/backend-a2/store-redis.mjs

@@ -1,7 +1,7 @@
 import { t as A2Error } from "../session-clear-wHd5GCpZ-BnKSxReK.mjs";
 import { t as retryableLazy } from "../retryable-lazy-DZWmHpii-Bye-W8q7.mjs";
 import { n as SYSTEM_CLOCK, t as RANDOM_IDS } from "../store-N8PXxDAS-BWBgzBHp.mjs";
-import { n as createRedisNotifyStore, t as redisTables } from "../redis-tables-DN9PfIDi.mjs";
+import { n as createRedisNotifyStore, t as redisTables } from "../redis-tables-BJQVUspu.mjs";
 //#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/store-redis.js
 /**
 * experimental-a2/store-redis — the Redis-protocol store backend, on Redis

package/dist/backend-a2/store-sqlite.d.mts

@@ -1,4 +1,4 @@
-import { t as BoardStore } from "../types-aCAf6lGU.mjs";
+import { t as BoardStore } from "../types-No0WdhE5.mjs";
 //#region src/store/sqlite.d.ts
 /**
  * A board in one SQLite file, A2's log and board's tables side by side: `a2()`'s

package/dist/backend-a2/store-sqlite.mjs

@@ -1,6 +1,6 @@
-import { r as sqlTables } from "../sql-U9WTxrwJ.mjs";
+import { r as sqlTables } from "../sql-D4Z_efJX.mjs";
 import { t as sqlite$1 } from "../store-sqlite-CxxPCcCT.mjs";
-import { t as sqliteDb } from "../sqlite-db-Ds4majtT.mjs";
+import { t as sqliteDb } from "../sqlite-db-Bz2JkfCU.mjs";
 //#region src/store/sqlite.ts
 /**
 * A board in one SQLite file, A2's log and board's tables side by side: `a2()`'s

package/dist/backend-a2.d.mts

@@ -1,10 +1,10 @@
-import { t as Actor, x as Attachment } from "./folds-jS9wlh9_.mjs";
+import { t as Actor, x as Attachment } from "./folds-ZkHM4M-v.mjs";
 import { l as Reducer, r as ContractEvent } from "./reducer-CYPHsSmd-BQIfozGi.mjs";
 import { a as SessionAppend, c as SessionConsumeOptions, d as SessionSchedule, f as StateOptions, l as SessionConsumeResult, n as A2Server, o as SessionClearOptions, p as SessionCleared, r as Consumer, s as SessionClearResult, t as A2Scheduler, u as SessionDeadLetters } from "./server-qgez0Xny-D5mLfqFQ.mjs";
-import { A as InboxItem, B as Me, D as IdentityView, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, Nt as SyncedView, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, V as MessageView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, jt as SyncThreadView, k as InboxEntry, mt as SourceRead, ot as ScheduleView, v as ChannelView } from "./client-xLxeDz0f.mjs";
-import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-ZKYTe3xa.mjs";
-import { n as fsBlob, r as memoryBlob, t as BlobStore } from "./blob-B-9AvYis.mjs";
-import { t as BoardStore } from "./types-aCAf6lGU.mjs";
+import { A as InboxItem, B as Me, D as IdentityView, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, Nt as SyncedView, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, V as MessageView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, jt as SyncThreadView, k as InboxEntry, mt as SourceRead, ot as ScheduleView, v as ChannelView } from "./client-BqAjk0Q4.mjs";
+import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-CPC_vyOo.mjs";
+import { n as fsBlob, r as memoryBlob, t as BlobStore } from "./blob-DmiQjrYy.mjs";
+import { t as BoardStore } from "./types-No0WdhE5.mjs";
 import { z } from "zod";
 //#region src/server/transport.d.ts
 /**
@@ -284,6 +284,7 @@ export declare function a2(options?: A2Options): {
   } & {
     target: string;
     limit?: number | undefined;
+    after?: string | undefined;
   }, signal: AbortSignal) => Promise<SourceRead>;
   joinSource: (caller: Caller, input: {
     key: string;
@@ -601,6 +602,7 @@ export declare function a2(options?: A2Options): {
         type: string;
         title: string;
         url: string | null;
+        body?: string | null | undefined;
         labels: Record<string, string>;
         unset: string[];
         owns?: string[] | undefined;
@@ -992,6 +994,7 @@ export declare function a2(options?: A2Options): {
         type: z.ZodString;
         title: z.ZodString;
         url: z.ZodNullable<z.ZodString>;
+        body: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         labels: z.ZodRecord<z.ZodString, z.ZodString>;
         unset: z.ZodArray<z.ZodString>;
         owns: z.ZodOptional<z.ZodArray<z.ZodString>>;

package/dist/backend-a2.mjs

@@ -1,2 +1,3 @@
-import { n as fsBlob, r as memoryBlob, t as a2 } from "./a2-B0_VlbtC.mjs";
+import { t as a2 } from "./a2-HUbQJ0RD.mjs";
+import { a as fsBlob, s as memoryBlob } from "./blob-DdbpJqN1.mjs";
 export { a2, fsBlob, memoryBlob };

package/dist/{backend-http-BvNFrvcY.mjs → backend-http-Bmp0IgD3.mjs}

@@ -1,4 +1,4 @@
-import { r as createHttp } from "./backend-http-CfLVYqmj.mjs";
+import { r as createHttp } from "./backend-http-CzIJMm58.mjs";
 import { i as environmentProfile, n as boardUrl, r as connect } from "./node-Zd_C-gxP.mjs";
 //#region src/backend-http/index.ts
 const environment = {

package/dist/{backend-http-E7YU0qhn.d.mts → backend-http-CqfKhrnn.d.mts}

@@ -1,6 +1,6 @@
-import { t as Actor, x as Attachment } from "./folds-jS9wlh9_.mjs";
-import { A as InboxItem, B as Me, D as IdentityView, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, Nt as SyncedView, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, V as MessageView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, jt as SyncThreadView, k as InboxEntry, mt as SourceRead, o as ProfileOption, ot as ScheduleView, v as ChannelView } from "./client-xLxeDz0f.mjs";
-import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-ZKYTe3xa.mjs";
+import { t as Actor, x as Attachment } from "./folds-ZkHM4M-v.mjs";
+import { A as InboxItem, B as Me, D as IdentityView, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, Nt as SyncedView, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, V as MessageView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, jt as SyncThreadView, k as InboxEntry, mt as SourceRead, o as ProfileOption, ot as ScheduleView, v as ChannelView } from "./client-BqAjk0Q4.mjs";
+import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-CPC_vyOo.mjs";
 //#region src/server/backend-http.d.ts
 type HttpOptions = {
   /**
@@ -258,6 +258,7 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
   } & {
     target: string;
     limit?: number | undefined;
+    after?: string | undefined;
   }, signal: AbortSignal) => Promise<SourceRead>;
   joinSource: (caller: Caller, input: {
     key: string;
@@ -575,6 +576,7 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
         type: string;
         title: string;
         url: string | null;
+        body?: string | null | undefined;
         labels: Record<string, string>;
         unset: string[];
         owns?: string[] | undefined;

package/dist/{backend-http-CfLVYqmj.mjs → backend-http-CzIJMm58.mjs}

@@ -1,6 +1,6 @@
 import "./files-SniSmeEr.mjs";
-import "./schemas-Be08nyfW.mjs";
-import { K as routes, O as RegisterBody, a as METHODS, n as compileWatcher, t as canonicalWatchers } from "./watchers-hash-7DJU9b-n.mjs";
+import "./schemas-DBmUO6pr.mjs";
+import { K as routes, O as RegisterBody, a as METHODS, n as compileWatcher, t as canonicalWatchers } from "./watchers-hash-BDhLVkV5.mjs";
 import { n as createBoardClient, t as BoardError } from "./client-D0Px7KzF.mjs";
 import { a as keyId, n as DERIVED_ID, o as sha256, r as derivedId, t as waitUntil } from "./wait-until-Dw4XrIDQ.mjs";
 import { a as forbidden, o as json, t as HttpError } from "./errors-CusN4x2l.mjs";
@@ -479,7 +479,7 @@ function createHttp(url, options, environment) {
 			return discovery();
 		},
 		async readSource(caller, input, signal) {
-			if ("self" in caller && bound().sync.some((entry) => entry.key === input.key)) return bound().readSource(input.key, input.target, input.limit ?? 50);
+			if ("self" in caller && bound().sync.some((entry) => entry.key === input.key)) return bound().readSource(input.key, input.target, input.limit ?? 50, input.after ?? null);
 			return remoteCall("readSource", caller, input, signal);
 		},
 		async joinSource(caller, input, signal) {

package/dist/backend-http.d.mts

@@ -1,4 +1,4 @@
-import { n as HttpOptions, t as HttpBackend } from "./backend-http-E7YU0qhn.mjs";
+import { n as HttpOptions, t as HttpBackend } from "./backend-http-CqfKhrnn.mjs";
 //#region src/backend-http/index.default.d.ts
 /**
  * The board at `url`, which keeps the log. Outside Node there's no environment to find it or a

package/dist/backend-http.mjs

@@ -1,2 +1,2 @@
-import { t as http } from "./index.default-DmKxH_E6.mjs";
+import { t as http } from "./index.default-rB8sJ9RX.mjs";
 export { http };

package/dist/backend-http.node.d.mts

@@ -1,4 +1,4 @@
-import { n as HttpOptions, t as HttpBackend } from "./backend-http-E7YU0qhn.mjs";
+import { n as HttpOptions, t as HttpBackend } from "./backend-http-CqfKhrnn.mjs";
 //#region src/backend-http/index.d.ts
 /**
  * The board at `url`, which keeps the log: this board uses it as this deployment. Without a

package/dist/backend-http.node.mjs

@@ -1,2 +1,2 @@
-import { t as http } from "./backend-http-BvNFrvcY.mjs";
+import { t as http } from "./backend-http-Bmp0IgD3.mjs";
 export { http };

package/dist/{backend-vercel-CIRObA0t.d.mts → backend-vercel-4tvcPKqX.d.mts}

@@ -1,6 +1,6 @@
-import { t as Actor, x as Attachment } from "./folds-jS9wlh9_.mjs";
-import { A as InboxItem, B as Me, D as IdentityView, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, Nt as SyncedView, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, V as MessageView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, jt as SyncThreadView, k as InboxEntry, mt as SourceRead, o as ProfileOption, ot as ScheduleView, v as ChannelView } from "./client-xLxeDz0f.mjs";
-import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-ZKYTe3xa.mjs";
+import { t as Actor, x as Attachment } from "./folds-ZkHM4M-v.mjs";
+import { A as InboxItem, B as Me, D as IdentityView, Ft as ThreadView, H as MessagesPage, Ht as UploadTicket, I as LinkedAccount, It as ThreadsPage, K as PersonView, Nt as SyncedView, R as MatchView, S as EventsPage, St as SyncCopiesView, Tt as SyncFindView, V as MessageView, b as Discovery, bt as SyncCodeView, dt as SourceJoin, et as RegistrationView, jt as SyncThreadView, k as InboxEntry, mt as SourceRead, o as ProfileOption, ot as ScheduleView, v as ChannelView } from "./client-BqAjk0Q4.mjs";
+import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-CPC_vyOo.mjs";
 //#region src/server/backend-vercel.d.ts
 type VercelOptions = {
   /** The team whose board it is: its ID (`team_…`) or its slug. In Node, by default your deployment's, or `VERCEL_ORG_ID`. */
@@ -14,6 +14,8 @@ type VercelOptions = {
    * a deployment's OIDC token, or your `vercel login`. Elsewhere, pass one that sends them.
    */
   fetch?: typeof fetch;
+  /** How files reach Vercel's storage, on URLs the API signs: `fetch` by default, never with credentials. */
+  files?: typeof fetch;
 };
 /** What finds the API's credentials and the team, in the Node build. A browser has none. */
 type VercelEnvironment = {
@@ -257,6 +259,7 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
   } & {
     target: string;
     limit?: number | undefined;
+    after?: string | undefined;
   }, signal: AbortSignal) => Promise<SourceRead>;
   joinSource: (caller: Caller, input: {
     key: string;
@@ -574,6 +577,7 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
         type: string;
         title: string;
         url: string | null;
+        body?: string | null | undefined;
         labels: Record<string, string>;
         unset: string[];
         owns?: string[] | undefined;