@vercel/board 0.28.0 → 0.30.0

package/dist/blob-DQK5prXT.mjs

@@ -0,0 +1,182 @@
+import { n as DIRECT_UPLOAD_BYTES_MAX, t as ATTACHMENT_BYTES_MAX } from "./files-SniSmeEr.mjs";
+import { i as Attachment } from "./schemas-DBmUO6pr.mjs";
+import { r as badRequest, s as notFound, t as HttpError } from "./errors-C_5rB8Iz.mjs";
+import { randomBytes } from "node:crypto";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+//#region src/server/blob.ts
+/** Files in memory, for tests: forgets everything when the process ends. */
+function memoryBlob() {
+	const files = /* @__PURE__ */ new Map();
+	return {
+		put: async (key, data, contentType) => void files.set(key, {
+			data: data.slice(),
+			contentType
+		}),
+		get: async (key) => files.get(key) ?? null
+	};
+}
+/** Files on disk, for development and `vb serve`: under `dir`, `.a2/attachments` by default. */
+function fsBlob(dir = ".a2/attachments") {
+	const path = (key) => join(dir, ...key.split("/"));
+	return {
+		async put(key, data, contentType) {
+			await mkdir(dirname(path(key)), { recursive: true });
+			await writeFile(path(key), data);
+			await writeFile(`${path(key)}.type`, contentType);
+		},
+		async get(key) {
+			try {
+				const [data, contentType] = await Promise.all([readFile(path(key)), readFile(`${path(key)}.type`, "utf8")]);
+				return {
+					data: new Uint8Array(data),
+					contentType
+				};
+			} catch {
+				return null;
+			}
+		}
+	};
+}
+const dataKey = (id) => `board/attachments/${id}`;
+/** A direct upload the board signed, until it's finished: what it's called, and who may finish it. */
+const ticketKey = (id) => `board/uploads/${id}.json`;
+const metaKey = (id) => `board/attachments/${id}.json`;
+/** `shot.png`, as the board stores a name: no paths, no control characters. */
+function fileName(name) {
+	return (name ?? "").split(/[\\/]/).pop().replace(/[\u0000-\u001f\u007f]/g, "").trim().slice(0, 255) || "file";
+}
+/** `image/png`, or `application/octet-stream` when the type isn't one. */
+function mediaType(type) {
+	const value = (type ?? "").split(";")[0].trim().toLowerCase();
+	return /^[a-z0-9][a-z0-9!#$&^_.+-]*\/[a-z0-9][a-z0-9!#$&^_.+-]*$/.test(value) && value.length <= 255 ? value : "application/octet-stream";
+}
+/** A board without a blob store keeps no files: every file route says so. */
+const noBlob = () => new HttpError(501, "no_files", "this board keeps no files: pass `blob` to `a2()`");
+/** 128 random bits, base64url, drawn again when they'd start with `-`, which a command line reads as a flag. */
+function attachmentId() {
+	for (;;) {
+		const id = randomBytes(16).toString("base64url");
+		if (!id.startsWith("-")) return id;
+	}
+}
+/**
+* Stores an upload under a fresh ID, with its metadata beside it. `uploadedBy`
+* is the principal that sent it, who can read it before any message carries it.
+* `max` is the most it can be: `ATTACHMENT_BYTES_MAX` unless the board's own sync imports it.
+*/
+async function writeUpload(blob, input, max = ATTACHMENT_BYTES_MAX) {
+	if (!blob) throw noBlob();
+	if (input.data.byteLength === 0) throw badRequest("the file is empty");
+	if (input.data.byteLength > max) throw new HttpError(413, "too_large", `attachments are at most ${max / 1024 / 1024} MB`);
+	const attachment = {
+		id: attachmentId(),
+		name: fileName(input.name),
+		type: mediaType(input.type),
+		size: input.data.byteLength
+	};
+	await blob.put(dataKey(attachment.id), input.data, attachment.type);
+	const meta = input.uploadedBy === void 0 ? attachment : {
+		...attachment,
+		uploadedBy: input.uploadedBy
+	};
+	await blob.put(metaKey(attachment.id), new TextEncoder().encode(JSON.stringify(meta)), "application/json");
+	return attachment;
+}
+async function bytes(data) {
+	return data instanceof Uint8Array ? data : new Uint8Array(await new Response(data).arrayBuffer());
+}
+const attachmentNotFound = (id) => notFound(`no attachment: ${id}`, "attachment_not_found");
+/**
+* An upload's metadata, as the board recorded it, never what a request says,
+* and who uploaded it: null for files the board imported itself, or stored
+* before it recorded that.
+*/
+async function readUpload(blob, id) {
+	if (!blob) throw noBlob();
+	const found = Attachment.shape.id.safeParse(id).success ? await blob.get(metaKey(id)) : null;
+	if (!found) throw attachmentNotFound(id);
+	const meta = JSON.parse(new TextDecoder().decode(await bytes(found.data)));
+	return {
+		attachment: Attachment.parse(meta),
+		uploadedBy: typeof meta.uploadedBy === "string" ? meta.uploadedBy : null
+	};
+}
+/** An attachment's bytes as the store keeps them, a stream or the bytes, for board() to serve. */
+async function attachmentBody(blob, id) {
+	if (!blob) throw noBlob();
+	const found = await blob.get(dataKey(id));
+	if (!found) throw attachmentNotFound(id);
+	return found.data;
+}
+/** How long a direct upload's URL takes bytes: long enough for 100 MB on a slow link. */
+const DIRECT_UPLOAD_TTL_MS = 18e5;
+const noDirectUploads = () => new HttpError(501, "no_direct_uploads", `this board's blob store can't take direct uploads, so files are at most ${ATTACHMENT_BYTES_MAX / 1024 / 1024} MB`);
+/**
+* Starts a direct upload: a fresh ID, and a URL in the store to `PUT` its bytes to. The board
+* keeps what the request said the file is until `finishUpload` checks the store has it.
+*/
+async function startUpload(blob, input) {
+	if (!blob) throw noBlob();
+	if (!blob.uploadUrl || !blob.head) throw noDirectUploads();
+	if (input.size > 104857600) throw new HttpError(413, "too_large", `direct uploads are at most ${DIRECT_UPLOAD_BYTES_MAX / 1024 / 1024} MB`);
+	const expires = new Date(Date.now() + DIRECT_UPLOAD_TTL_MS);
+	const ticket = {
+		id: attachmentId(),
+		name: fileName(input.name),
+		type: mediaType(input.type),
+		size: input.size,
+		uploadedBy: input.uploadedBy,
+		expiresAt: expires.toISOString()
+	};
+	await blob.put(ticketKey(ticket.id), new TextEncoder().encode(JSON.stringify(ticket)), "application/json");
+	const { url, headers } = await blob.uploadUrl(dataKey(ticket.id), {
+		contentType: ticket.type,
+		maxBytes: ticket.size,
+		expiresAt: expires
+	});
+	return {
+		id: ticket.id,
+		url,
+		headers: {
+			...headers,
+			"content-type": ticket.type
+		},
+		expiresAt: ticket.expiresAt
+	};
+}
+/**
+* Finishes a direct upload: once the store has exactly the bytes its start said, the board records
+* the attachment, as `writeUpload` does. Only its uploader may finish it; a second finish answers
+* the same attachment. It never reads the record before writing it: a store with a cache (Vercel
+* Blob's CDN) would keep that miss, and the post that names the file would find nothing.
+*/
+async function finishUpload(blob, id, principal) {
+	if (!blob) throw noBlob();
+	const found = Attachment.shape.id.safeParse(id).success ? await blob.get(ticketKey(id)) : null;
+	const ticket = found ? JSON.parse(new TextDecoder().decode(await bytes(found.data))) : null;
+	if (!ticket || ticket.uploadedBy !== principal) throw notFound(`no upload: ${id}`, "upload_not_found");
+	if (!blob.head) throw noDirectUploads();
+	const stored = await blob.head(dataKey(id));
+	if (!stored) throw new HttpError(409, "not_uploaded", `nothing's been uploaded for ${id} yet: PUT the file to its URL first`);
+	if (stored.size !== ticket.size) throw badRequest(`the store has ${stored.size} bytes for ${id}, but its upload said ${ticket.size}`, "size_mismatch");
+	const attachment = {
+		id,
+		name: ticket.name,
+		type: ticket.type,
+		size: stored.size
+	};
+	try {
+		await blob.put(metaKey(id), new TextEncoder().encode(JSON.stringify({
+			...attachment,
+			uploadedBy: principal
+		})), "application/json");
+	} catch (error) {
+		const done = await blob.get(metaKey(id)).catch(() => null);
+		if (!done) throw error;
+		return Attachment.parse(JSON.parse(new TextDecoder().decode(await bytes(done.data))));
+	}
+	return attachment;
+}
+//#endregion
+export { fsBlob as a, readUpload as c, finishUpload as i, startUpload as l, attachmentNotFound as n, mediaType as o, fileName as r, memoryBlob as s, attachmentBody as t, writeUpload as u };

package/dist/{chat-provider-DnHibqnM.mjs → chat-provider-COtsU5jB.mjs}

@@ -1,5 +1,5 @@
-import "./external-BV_cUncs.mjs";
-import { n as ResolvedTarget, r as SyncProvider } from "./provider-poIkXapd.mjs";
+import "./external-D3p5T57R.mjs";
+import { n as ResolvedTarget, r as SyncProvider } from "./provider-BaVmi4Hi.mjs";
 import { n as userTokensOf } from "./users-yryHKFMo.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Chat, stringifyMarkdown } from "chat";

package/dist/{chat-provider-DsNEBQiA.d.mts → chat-provider-D6jVT4wS.d.mts}

@@ -1,6 +1,6 @@
-import { d as ExternalFile, f as ExternalLink, l as ExternalAuthor, t as Actor } from "./folds-jS9wlh9_.mjs";
-import { dt as SourceJoin, mt as SourceRead } from "./client-xLxeDz0f.mjs";
-import { M as SyncRoot, O as ProviderEvent, a as ProviderOptions, c as ReceivedEvent, d as ResolvedTarget, i as ProviderFile, n as FileDelivery, o as ProviderPost, p as SyncProvider, r as ProviderDelivery, s as Receive, t as FetchedLink, y as SyncFn } from "./provider-Cdg1qadh.mjs";
+import { d as ExternalFile, f as ExternalLink, l as ExternalAuthor, t as Actor } from "./folds-8wRRXjAt.mjs";
+import { ft as SourceJoin, ht as SourceRead } from "./client-CjAatpV4.mjs";
+import { M as SyncRoot, O as ProviderEvent, a as ProviderOptions, c as ReceivedEvent, d as ResolvedTarget, i as ProviderFile, n as FileDelivery, o as ProviderPost, p as SyncProvider, r as ProviderDelivery, s as Receive, t as FetchedLink, y as SyncFn } from "./provider-Bm46LAdp.mjs";
 import { Adapter, Author, FileUpload, Message, ReactionEvent } from "chat";
 //#region src/sync/types.d.ts
 declare function externalAuthor(platform: string, author: Author): ExternalAuthor;
@@ -45,6 +45,7 @@ type ChatTransport = Omit<ProviderOptions, 'uploadsFiles'> & {
   /** A channel or thread, read on demand without syncing it. */
   read?(target: string, options: {
     limit: number;
+    after: string | null;
   }): Promise<SourceRead>;
   /** Adds the app to a channel so `read` can read it. */
   join?(target: string): Promise<SourceJoin>;
@@ -126,6 +127,7 @@ declare abstract class ChatSyncProvider<E extends ProviderEvent = ProviderEvent>
   url(thread: string, message: string): Promise<string | null>;
   read(target: string, options: {
     limit: number;
+    after: string | null;
   }): Promise<SourceRead>;
   join(target: string): Promise<SourceJoin>;
   fetchFile(file: ExternalFile): Promise<Uint8Array | null>;

package/dist/cli-commands.d.mts

@@ -1,2 +1,2 @@
-import { a as OptionName, c as globalOptions, d as options, f as usage, i as CliOption, l as groups, n as CliCommand, o as commands, r as CliExample, s as filters, t as CliArgument, u as option } from "./commands-D6gvrOh3.mjs";
+import { a as OptionName, c as globalOptions, d as options, f as usage, i as CliOption, l as groups, n as CliCommand, o as commands, r as CliExample, s as filters, t as CliArgument, u as option } from "./commands-BtH69yqt.mjs";
 export { CliArgument, CliCommand, CliExample, CliOption, OptionName, commands, filters, globalOptions, groups, option, options, usage };

package/dist/cli-commands.mjs

@@ -1,2 +1,2 @@
-import { a as option, i as groups, n as filters, o as options, r as globalOptions, s as usage, t as commands } from "./commands-BFookFtn.mjs";
+import { a as option, i as groups, n as filters, o as options, r as globalOptions, s as usage, t as commands } from "./commands-B5DHjZKK.mjs";
 export { commands, filters, globalOptions, groups, option, options, usage };

package/dist/cli-embedded.d.mts

@@ -1,5 +1,5 @@
-import { d as Board } from "./backend-ZKYTe3xa.mjs";
-import "./index-C05it0mC.mjs";
+import { d as Board } from "./backend-n3hajfrD.mjs";
+import "./index-BygAXP7t.mjs";
 //#region src/cli/failure.d.ts
 /**
  * What kind of failure it is, which fixes the exit code: 2 for `usage` and `missing_input`, 130

package/dist/cli-embedded.mjs

@@ -1,4 +1,4 @@
-import { a as commandLine, c as failureLines, i as mainWith, l as formatFailure, n as commandWord, o as exitCode, r as main, s as failureDocument, t as Failed } from "./main-eci7w-aP.mjs";
+import { a as commandLine, c as failureLines, i as mainWith, l as formatFailure, n as commandWord, o as exitCode, r as main, s as failureDocument, t as Failed } from "./main-D2s-QBOK.mjs";
 //#region src/cli/embedded.ts
 /**
 * Board's CLI as `appName` names it in help, usage, and errors (`vercel board`). With no board

package/dist/cli.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { t as ATTACHMENT_BYTES_MAX } from "./files-SniSmeEr.mjs";
-import "./schemas-Be08nyfW.mjs";
-import { a as option } from "./commands-BFookFtn.mjs";
-import { l as projectDir } from "./node-Zd_C-gxP.mjs";
-import { r as main, u as who } from "./main-eci7w-aP.mjs";
+import "./schemas-DBmUO6pr.mjs";
+import { a as option } from "./commands-B5DHjZKK.mjs";
+import { l as projectDir } from "./node-D8Rtg1su.mjs";
+import { r as main, u as who } from "./main-D2s-QBOK.mjs";
 import { randomBytes, timingSafeEqual } from "node:crypto";
 import { appendFile, readFile } from "node:fs/promises";
 import { join } from "node:path";
@@ -661,7 +661,7 @@ const local = {
 			if (args.length > 0) throw usage("serve takes no arguments: pass its port with --port, and its directory with --dir.");
 			const port = portFlag();
 			const root = projectDir();
-			const { localHandle, serveLocal } = await import("./serve-B09an9DQ.mjs");
+			const { localHandle, serveLocal } = await import("./serve-lPoBDEds.mjs");
 			const handle = flags.handle ?? process.env.BOARD_HANDLE;
 			const local = await serveLocal({
 				dir: flags.dir ?? join(root, ".board"),

package/dist/{client-xLxeDz0f.d.mts → client-CjAatpV4.d.mts}

@@ -1,10 +1,11 @@
 import { n as AccessSummary } from "./access-CV96SYgr.mjs";
-import { a as ExternalCopy, g as BoardEvent, o as Message, p as Link, r as Channel, t as Actor, u as ExternalEvent, x as Attachment } from "./folds-jS9wlh9_.mjs";
+import { a as ExternalCopy, g as BoardEvent, o as Message, p as Link, r as Channel, t as Actor, u as ExternalEvent, x as Attachment } from "./folds-8wRRXjAt.mjs";
 import { z } from "zod";
 //#region src/api/routes.d.ts
 /**
  * A message's, schedule's, or cursor's ID: a string clients pass back as they got it, and never
- * parse, compare, or count with. Each backend picks its own; a board on `a2()` writes decimals.
+ * parse, compare, or count with. Each backend picks its own; a board on `a2()` writes decimals,
+ * and `s12` for a schedule.
  */
 declare const Ref: z.ZodString;
 /** A sync target as the board that syncs it resolved it: a platform channel to start a thread in, or a thread to join. */
@@ -78,6 +79,7 @@ declare const PostBody: z.ZodObject<{
   }, z.core.$strip>]>>>;
   id: z.ZodOptional<z.ZodString>;
   attachments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  after: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /**
  * A message to post later, as the caller: once (`in` or `at`), or repeating
@@ -171,6 +173,7 @@ declare const AckBody: z.ZodObject<{
 declare const SourceReadQuery: z.ZodObject<{
   target: z.ZodString;
   limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+  after: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** A channel to add the board's app to, so it can be read on demand: `#name`, an ID, or a link into it. */
 declare const SourceJoinBody: z.ZodObject<{
@@ -231,6 +234,7 @@ declare const SyncImportBody: z.ZodDiscriminatedUnion<[z.ZodObject<{
     message: z.ZodNullable<z.ZodString>;
   }, z.core.$strip>>>;
   id: z.ZodOptional<z.ZodString>;
+  after: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
   author: z.ZodObject<{
     id: z.ZodString;
@@ -252,6 +256,7 @@ declare const SyncImportBody: z.ZodDiscriminatedUnion<[z.ZodObject<{
     channel: z.ZodString;
     thread: z.ZodString;
   }, z.core.$strip>>;
+  revision: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
   author: z.ZodObject<{
     id: z.ZodString;
@@ -267,6 +272,7 @@ declare const SyncImportBody: z.ZodDiscriminatedUnion<[z.ZodObject<{
   }, z.core.$strip>>;
   message: z.ZodOptional<z.ZodString>;
   op: z.ZodLiteral<"delete">;
+  revision: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
   author: z.ZodObject<{
     id: z.ZodString;
@@ -301,6 +307,7 @@ declare const SyncImportBody: z.ZodDiscriminatedUnion<[z.ZodObject<{
   op: z.ZodLiteral<"labels">;
   set: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
   unset: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  if: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>>;
 }, z.core.$strip>, z.ZodObject<{
   author: z.ZodObject<{
     id: z.ZodString;
@@ -495,6 +502,7 @@ declare const InboxPushBody: z.ZodObject<{
       type: z.ZodString;
       title: z.ZodString;
       url: z.ZodNullable<z.ZodString>;
+      body: z.ZodOptional<z.ZodNullable<z.ZodString>>;
       labels: z.ZodRecord<z.ZodString, z.ZodString>;
       unset: z.ZodArray<z.ZodString>;
       owns: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -551,11 +559,15 @@ declare const SignInQuery: z.ZodObject<{
 declare const SyncUnlinkBody: z.ZodObject<{
   account: z.ZodString;
 }, z.core.$strip>;
-/** A direct upload, before its bytes: what the file will be called, its type, and its exact size. */
+/**
+ * A direct upload, before its bytes: what the file will be called, its type, its exact size, and
+ * the SHA-256 of its bytes, in base64, for a store that signs its URL for them (Vercel's).
+ */
 declare const UploadStartBody: z.ZodObject<{
   name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   size: z.ZodNumber;
+  sha256: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** Where to send a direct upload's bytes: `PUT` the file to `url` with `headers` (its `content-type` included), before `expiresAt`, then finish it. */
 type UploadTicket = {
@@ -566,8 +578,11 @@ type UploadTicket = {
 };
 declare const EditBody: z.ZodObject<{
   text: z.ZodString;
+  revision: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
-declare const DeleteBody: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+declare const DeleteBody: z.ZodOptional<z.ZodObject<{
+  revision: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>>;
 /** `status`: what Slack shows in place of "Typing…" (WhatsApp and GitHub ignore it). */
 declare const TypingBody: z.ZodOptional<z.ZodObject<{
   status: z.ZodOptional<z.ZodString>;
@@ -576,9 +591,12 @@ declare const ReactBody: z.ZodObject<{
   emoji: z.ZodString;
   remove: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
+/** At most this many labels in a label write's `if`. */
+declare const LABEL_CONDITIONS_MAX = 16;
 declare const LabelBody: z.ZodObject<{
   set: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
   unset: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  if: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>>;
 }, z.core.$strip>;
 type FiltersInput = z.input<typeof Filters$1>;
 type SyncImportInput = z.input<typeof SyncImportBody>;
@@ -653,7 +671,7 @@ type ActorView = Pick<Actor, 'kind' | 'handle' | 'name' | 'avatar'> & {
   person?: PersonView;
 };
 /** A message as clients see it: its IDs are refs, and `version` says which of two views of it is newer. */
-type MessageView = Omit<Message, 'id' | 're' | 'replyTo' | 'links' | 'schedule' | 'version'> & {
+type MessageView = Omit<Message, 'id' | 're' | 'replyTo' | 'links' | 'schedule' | 'version' | 'revision'> & {
   id: string;
   /** The thread's root, or null for a root. */
   re: string | null;
@@ -661,6 +679,11 @@ type MessageView = Omit<Message, 'id' | 're' | 'replyTo' | 'links' | 'schedule'
   replyTo: string | null;
   /** Grows with each change to this message: of two views of it, the one with the higher version is newer. */
   version: number;
+  /**
+   * Changes with each edit and delete, and only then: what an edit or a delete passes as `revision`
+   * to change it only if no one has since.
+   */
+  revision: number;
   links: LinkView[];
   /** Set when a schedule posted it: the schedule's ID and which send this was, from 0. */
   schedule?: {
@@ -911,6 +934,8 @@ type SourceRead = {
   messages: SourceMessage[];
   /** The platform has more than `limit`: older messages in a channel, later replies in a thread. */
   more: boolean;
+  /** Where to pick up, as `after`, when the platform can page past `limit`. */
+  next?: string | null;
 };
 /** A channel the board's app joined, or was already in (`joined: false`). */
 type SourceJoin = {
@@ -1012,6 +1037,7 @@ declare const routes: {
       }, z.core.$strip>]>>>;
       id: z.ZodOptional<z.ZodString>;
       attachments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      after: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
   };
   readonly edit: {
@@ -1019,12 +1045,15 @@ declare const routes: {
     readonly path: '/messages/:id/edit';
     readonly body: z.ZodObject<{
       text: z.ZodString;
+      revision: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>;
   };
   readonly delete: {
     readonly method: 'POST';
     readonly path: '/messages/:id/delete';
-    readonly body: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
+    readonly body: z.ZodOptional<z.ZodObject<{
+      revision: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
   };
   readonly react: {
     readonly method: 'POST';
@@ -1040,6 +1069,7 @@ declare const routes: {
     readonly body: z.ZodObject<{
       set: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       unset: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      if: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>>;
     }, z.core.$strip>;
   };
   /** Attaches the thread to a sync target, recording a `thread` receipt: needs `sync` where the thread is. */
@@ -1226,6 +1256,7 @@ declare const routes: {
           type: z.ZodString;
           title: z.ZodString;
           url: z.ZodNullable<z.ZodString>;
+          body: z.ZodOptional<z.ZodNullable<z.ZodString>>;
           labels: z.ZodRecord<z.ZodString, z.ZodString>;
           unset: z.ZodArray<z.ZodString>;
           owns: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -1308,6 +1339,7 @@ declare const routes: {
         message: z.ZodNullable<z.ZodString>;
       }, z.core.$strip>>>;
       id: z.ZodOptional<z.ZodString>;
+      after: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
       author: z.ZodObject<{
         id: z.ZodString;
@@ -1329,6 +1361,7 @@ declare const routes: {
         channel: z.ZodString;
         thread: z.ZodString;
       }, z.core.$strip>>;
+      revision: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>, z.ZodObject<{
       author: z.ZodObject<{
         id: z.ZodString;
@@ -1344,6 +1377,7 @@ declare const routes: {
       }, z.core.$strip>>;
       message: z.ZodOptional<z.ZodString>;
       op: z.ZodLiteral<"delete">;
+      revision: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>, z.ZodObject<{
       author: z.ZodObject<{
         id: z.ZodString;
@@ -1378,6 +1412,7 @@ declare const routes: {
       op: z.ZodLiteral<"labels">;
       set: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       unset: z.ZodOptional<z.ZodArray<z.ZodString>>;
+      if: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>>;
     }, z.core.$strip>, z.ZodObject<{
       author: z.ZodObject<{
         id: z.ZodString;
@@ -1535,6 +1570,7 @@ declare const routes: {
     readonly query: z.ZodObject<{
       target: z.ZodString;
       limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+      after: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
   };
   /** Adds the app to a public channel so it can be read, where that sync runs and opted in with `join`. Full access only. */
@@ -1586,6 +1622,7 @@ declare const routes: {
       name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
       type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
       size: z.ZodNumber;
+      sha256: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
   };
   /** After the `PUT`: the board checks what landed in the store and records the attachment. */
@@ -1760,7 +1797,13 @@ type PostOptions = {
   /** Files from `upload`, or their IDs. */
   attachments?: (Attachment | string)[];
 };
-type ReplyOptions = Omit<PostOptions, 'sync'>;
+type ReplyOptions = Omit<PostOptions, 'sync'> & {
+  /**
+   * Posts only while this is the thread's newest message: the ID of the last one you read. If
+   * another has come after it, nothing is posted, and it throws a 409 `newer_message`.
+   */
+  after?: string;
+};
 /**
  * When a scheduled message goes out: once `in` a while or `at` a time, or
  * `every` so often (first at `at`, `in`, or one `every` from now), stopping
@@ -1859,11 +1902,19 @@ declare function createBoardClient(options: ClientOptions): {
   download: (id: string, opts?: {
     signal?: AbortSignal;
   }) => Promise<Response>;
-  edit: (id: string, text: string) => Promise<{
+  /**
+   * `revision` is the message's as you read it: if it's been edited or deleted since, nothing
+   * changes, and it throws a 409 `revision_conflict`.
+   */
+  edit: (id: string, text: string, opts?: {
+    revision?: number;
+  }) => Promise<{
     ok: true;
     unknownMentions?: string[];
   }>;
-  delete: (id: string) => Promise<{
+  delete: (id: string, opts?: {
+    revision?: number;
+  }) => Promise<{
     ok: true;
   }>;
   /** `emoji` is a short name, `:name:`, or the character itself. */
@@ -1872,9 +1923,14 @@ declare function createBoardClient(options: ClientOptions): {
   }) => Promise<{
     ok: true;
   }>;
+  /**
+   * `if` is what the labels must be now, a value or null for one that mustn't be set: if one
+   * isn't, nothing changes, and it throws a 409 `label_conflict`.
+   */
   label: (id: string, change: {
     set?: Record<string, string>;
     unset?: string[];
+    if?: Record<string, string | null>;
   }) => Promise<{
     ok: true;
   }>;
@@ -1930,6 +1986,7 @@ declare function createBoardClient(options: ClientOptions): {
    */
   readSource: (key: string, target: string, opts?: {
     limit?: number;
+    after?: string;
   }) => Promise<SourceRead>;
   /** Adds the app to a public channel so `readSource` can read it, where the sync opted in with `join`. Full access only. */
   joinSource: (key: string, target: string) => Promise<SourceJoin>;
@@ -2002,4 +2059,4 @@ declare function createBoardClient(options: ClientOptions): {
   }, opts?: WaitOptions): Promise<BoardEventView | null>;
 };
 //#endregion
-export { RegisterInput as $, InboxItem as A, SyncRootsQuery as At, Me as B, TypingResult as Bt, EventsQuery as C, SyncFindInput as Ct, IdentityView as D, SyncImportInput as Dt, IdentityUnlinkBody as E, SyncImportBody as Et, LinkView as F, ThreadView as Ft, ParsedFilters as G, MessagesPage as H, UploadTicket as Ht, LinkedAccount as I, ThreadsPage as It, PostInput as J, PersonView as K, LinkedQuery as L, ThreadsQuery as Lt, InboxPushBody as M, SyncUnlinkBody as Mt, InboxQuery as N, SyncedView as Nt, InboxAckBody as O, SyncReceiptBody as Ot, LabelBody as P, ThreadSummaryView as Pt, RegisterBody as Q, MatchView as R, ThreadsQueryInput as Rt, EventsPage as S, SyncCopiesView as St, FiltersInput as T, SyncFindView as Tt, MessagesQuery as U, routes as Ut, MessageView as V, UploadStartBody as Vt, MessagesQueryInput as W, ReactBody as X, REGISTERED_WATCHERS_MAX as Y, Ref as Z, BoardEventView as _, SyncAccountInput as _t, PostOptions as a, ScheduleInput as at, Discovery as b, SyncCodeView as bt, ScheduleOptions as c, SchedulesQueryInput as ct, WaitOptions as d, SourceJoin as dt, RegistrationView as et, Written as f, SourceJoinBody as ft, ApiError as g, SyncAccountBody as gt, ActorView as h, SourceReadQuery as ht, Filters as i, ScheduleBodyOutput as it, InboxNextQuery as j, SyncThreadView as jt, InboxEntry as k, SyncReceiptInput as kt, ScheduleTiming as l, SchedulesQueryOutput as lt, AckBody as m, SourceRead as mt, BoardError as n, RouteName as nt, ProfileOption as o, ScheduleView as ot, duration as p, SourceMessage as pt, PostBody as q, ErrorOrigin as r, ScheduleBody as rt, ReplyOptions as s, SchedulesQuery as st, BoardClient as t, ResolvedSyncTarget as tt, UploadInput as u, SignInQuery as ut, ChannelView as v, SyncBody as vt, EventsQueryInput as w, SyncFindQuery as wt, EditBody as x, SyncCopiesQuery as xt, DeleteBody as y, SyncCodeBody as yt, MatchesQuery as z, TypingBody as zt };
+export { RegisterBody as $, InboxItem as A, SyncReceiptInput as At, MatchesQuery as B, TypingBody as Bt, EventsQuery as C, SyncCopiesView as Ct, IdentityView as D, SyncImportBody as Dt, IdentityUnlinkBody as E, SyncFindView as Et, LabelBody as F, ThreadSummaryView as Ft, MessagesQueryInput as G, MessageView as H, UploadStartBody as Ht, LinkView as I, ThreadView as It, PostBody as J, ParsedFilters as K, LinkedAccount as L, ThreadsPage as Lt, InboxPushBody as M, SyncThreadView as Mt, InboxQuery as N, SyncUnlinkBody as Nt, InboxAckBody as O, SyncImportInput as Ot, LABEL_CONDITIONS_MAX as P, SyncedView as Pt, Ref as Q, LinkedQuery as R, ThreadsQuery as Rt, EventsPage as S, SyncCopiesQuery as St, FiltersInput as T, SyncFindQuery as Tt, MessagesPage as U, UploadTicket as Ut, Me as V, TypingResult as Vt, MessagesQuery as W, routes as Wt, REGISTERED_WATCHERS_MAX as X, PostInput as Y, ReactBody as Z, BoardEventView as _, SyncAccountBody as _t, PostOptions as a, ScheduleBodyOutput as at, Discovery as b, SyncCodeBody as bt, ScheduleOptions as c, SchedulesQuery as ct, WaitOptions as d, SignInQuery as dt, RegisterInput as et, Written as f, SourceJoin as ft, ApiError as g, SourceReadQuery as gt, ActorView as h, SourceRead as ht, Filters as i, ScheduleBody as it, InboxNextQuery as j, SyncRootsQuery as jt, InboxEntry as k, SyncReceiptBody as kt, ScheduleTiming as l, SchedulesQueryInput as lt, AckBody as m, SourceMessage as mt, BoardError as n, ResolvedSyncTarget as nt, ProfileOption as o, ScheduleInput as ot, duration as p, SourceJoinBody as pt, PersonView as q, ErrorOrigin as r, RouteName as rt, ReplyOptions as s, ScheduleView as st, BoardClient as t, RegistrationView as tt, UploadInput as u, SchedulesQueryOutput as ut, ChannelView as v, SyncAccountInput as vt, EventsQueryInput as w, SyncFindInput as wt, EditBody as x, SyncCodeView as xt, DeleteBody as y, SyncBody as yt, MatchView as z, ThreadsQueryInput as zt };