@vercel/board 0.29.0 → 0.31.0

package/dist/{provider-DmSTp9lI.d.mts → provider-gynDUoyW.d.mts}

@@ -1,5 +1,5 @@
-import { d as ExternalFile, f as ExternalLink, l as ExternalAuthor, p as Link, t as Actor, u as ExternalEvent } from "./folds-ZkHM4M-v.mjs";
-import { V as MessageView, _ as BoardEventView, dt as SourceJoin, mt as SourceRead, t as BoardClient } from "./client-BqAjk0Q4.mjs";
+import { d as ExternalFile, f as ExternalLink, l as ExternalAuthor, p as Link, t as Actor, u as ExternalEvent } from "./folds-DLUzfibJ.mjs";
+import { U as MessageView, _ as BoardEventView, dt as SourceJoin, mt as SourceRead, t as BoardClient } from "./client-COfYrgfV.mjs";
 import { z } from "zod";
 //#region src/sync/events.d.ts
 declare const EventBase: z.ZodObject<{
@@ -401,33 +401,6 @@ declare function render<E extends ProviderEvent = ProviderEvent>(renderer: Rende
  */
 declare function channels<E extends ProviderEvent = ProviderEvent>(map: Record<string, SyncUnit<E>>): SyncFn<E>;
 //#endregion
-//#region src/sync/users.d.ts
-/**
- * People's own platform tokens, so a board message they wrote reaches Slack or
- * GitHub as them, and signing in proves an account is theirs. The board never
- * stores a token: it asks for one at each delivery, and a person without one
- * (never signed in, revoked, expired) is delivered as the bot, as before.
- */
-type UserTokens = {
-  /**
-   * A sign-in URL that binds whoever completes it to `principal`. Show it only to them. With
-   * `callback`, the platform sends them there once they've approved.
-   */
-  authorize(principal: string, options?: {
-    callback?: string;
-  }): Promise<string>;
-  /** `principal`'s token on the platform, or null when they haven't signed in. */
-  token(principal: string): Promise<string | null>;
-};
-/**
- * Gives an adapter people's tokens, for your own OAuth: `slack({ adapter:
- * withUserTokens(createSlackAdapter(...), { authorize, token }) }, sync)`. A
- * Connect connector name (`slack('slack/acme', sync)`) does this for you.
- */
-declare function withUserTokens<A extends object>(adapter: A, tokens: UserTokens): A;
-/** Vercel Connect's user tokens for `connector`: the subject is the board's principal, so Connect binds the account to it. */
-declare function connectUserTokens(connector: string): UserTokens;
-//#endregion
 //#region src/sync/provider.d.ts
 declare const ResolvedTarget: z.ZodObject<{
   target: z.ZodString;
@@ -449,7 +422,7 @@ type RenderInput = {
   /** The message as clients see it: its IDs are refs. */
   message: Readonly<MessageView>;
   author: Readonly<Actor> | null;
-  /** How this platform mentions an actor, through linked accounts; null when it can't. */
+  /** How this platform mentions an actor when it's one of its own (`<@U123>`); null for anyone else. */
   mentionOf: (actor: string) => string | null;
   label: string;
   target: string;
@@ -498,8 +471,6 @@ type ProviderOptions = {
   uploadsFiles?: boolean;
   /** Whether a new thread's root can carry its files in the same message as its text. */
   startsThreadsWithFiles?: boolean;
-  /** People's own tokens, to post as them and to link accounts by signing in. */
-  users?: UserTokens | null;
 };
 declare const ReceivedEvent: z.ZodObject<{
   event: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -629,28 +600,27 @@ declare abstract class SyncProvider<E extends ProviderEvent = ProviderEvent> {
   readonly uploadsFiles: boolean;
   readonly startsThreadsWithFiles: boolean;
   private readonly fn;
-  /** People's tokens, when the adapter has them: messages they write post as them. */
-  readonly users: UserTokens | null;
   protected readonly options: ProviderOptions;
   constructor(options: ProviderOptions, sync: SyncFn<E>);
   abstract receive(key: string, request: Request, emit: Receive): Promise<Response>;
   abstract resolveChannel(key: string): Promise<string>;
   abstract resolveTarget(target: string): Promise<ResolvedTarget>;
   abstract post(target: string, kind: ResolvedTarget['kind'], body: ProviderPost): Promise<ProviderDelivery>;
-  /** The platform account a person's token belongs to. */
-  whoAmI(_token: string): Promise<ExternalAuthor>;
-  /** `post`, as the person whose token this is. */
-  postAs(_token: string, _target: string, _kind: ResolvedTarget['kind'], _body: ProviderPost): Promise<ProviderDelivery>;
-  editAs(_token: string, _thread: string, _message: string, _body: ProviderPost): Promise<void>;
-  deleteAs(_token: string, _thread: string, _message: string): Promise<void>;
   findByEmail(_email: string): Promise<ExternalAuthor | null>;
   mention(_actor: Actor): string | null;
   fetchRoot(_thread: string): Promise<SyncRoot | null>;
   fetchFile(_file: ExternalFile): Promise<Uint8Array | null>;
   /** The platform's own link to an event's message, or null when it has none. */
   permalink(_event: E): Promise<string | null>;
-  /** A linked message the platform didn't describe, read from the platform. */
-  fetchLink(_link: ExternalLink): Promise<FetchedLink>;
+  /**
+   * A linked message the platform didn't describe, read from the platform. `linker` is the
+   * platform message that links it, by its own IDs: what the platform says about the link may be
+   * there by now.
+   */
+  fetchLink(_link: ExternalLink, _linker: {
+    thread: string;
+    message: string;
+  }): Promise<FetchedLink>;
   /**
    * The message a URL of this platform's names, by its own thread and message IDs, or null for a
    * URL that isn't one. `message` is null for a link to a thread itself. It asks the platform
@@ -692,4 +662,4 @@ declare abstract class SyncProvider<E extends ProviderEvent = ProviderEvent> {
   render(input: RenderInput): string;
 }
 //#endregion
-export { SyncOverrides as A, channels as C, EventBase as D, render as E, SyncRoot as M, envelope as N, ProviderEvent as O, eventSchema as P, SyncUnit as S, mirror as T, withUserTokens as _, ProviderOptions as a, SyncIn as b, ReceivedEvent as c, ResolvedTarget as d, SyncContext as f, connectUserTokens as g, UserTokens as h, ProviderFile as i, SyncResult as j, RootOverride as k, RenderInput as l, UnreadableError as m, FileDelivery as n, ProviderPost as o, SyncProvider as p, ProviderDelivery as r, Receive as s, FetchedLink as t, Renderer as u, Sync as v, into as w, SyncOut as x, SyncFn as y };
+export { envelope as A, render as C, SyncOverrides as D, RootOverride as E, SyncResult as O, mirror as S, ProviderEvent as T, SyncIn as _, ProviderOptions as a, channels as b, ReceivedEvent as c, ResolvedTarget as d, SyncContext as f, SyncFn as g, Sync as h, ProviderFile as i, eventSchema as j, SyncRoot as k, RenderInput as l, UnreadableError as m, FileDelivery as n, ProviderPost as o, SyncProvider as p, ProviderDelivery as r, Receive as s, FetchedLink as t, Renderer as u, SyncOut as v, EventBase as w, into as x, SyncUnit as y };

package/dist/{redis-tables-BJQVUspu.mjs → redis-tables-DHf85ixI.mjs}

@@ -1,14 +1,14 @@
 import { c as externalMessageKey } from "./external-D3p5T57R.mjs";
 import { n as setOwn } from "./own-OwgPWdmh.mjs";
-import { n as CLEAR_EVENT_TYPE, o as sessionClearedError, s as supersededAttemptError, t as A2Error } from "./session-clear-wHd5GCpZ-BnKSxReK.mjs";
-import { m as nullProtoRecord, n as NOTIFY_TIMINGS, v as stateTailReaders } from "./internal-CvsrprnU-CRY89I-b.mjs";
-import { i as presenceTombstones, n as isSerializedEvent, r as parseSerializedEvent, t as bufferedEvents } from "./stream-buffer-DrTyiIuo-BKy-vI14.mjs";
-import { i as streamActivities, n as defaultSleep, r as pollingStream, t as createStreamActivity } from "./store-polling-BZt2Rf3D-BiEM6_HB.mjs";
-import { t as retryableLazy } from "./retryable-lazy-DZWmHpii-Bye-W8q7.mjs";
-import { i as syncReads, n as project, r as projectSync, t as concernedMessageId } from "./project-CBXlLftU.mjs";
-import { i as idempotentReplay, n as decodeCause } from "./store-codec-DwrWlgQx-CYxGW0aD.mjs";
-import { t as pollPresence } from "./store-presence-polling-JuAy2Ck2-CYpuK75X.mjs";
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/store-redis-notify-CsJw_hfD.js
+import { a as duplicateBatchError, c as sessionClearedError, l as supersededAttemptError, n as CLEAR_EVENT_TYPE, s as lastIndexMismatchError, t as A2Error } from "./session-clear-XJYpmUpg-2q8l_FJR.mjs";
+import { m as nullProtoRecord, n as NOTIFY_TIMINGS, v as stateTailReaders } from "./internal-CvsrprnU-zZMpDiRY.mjs";
+import { i as presenceTombstones, n as isSerializedEvent, r as parseSerializedEvent, t as bufferedEvents } from "./stream-buffer-DrTyiIuo-Be10yOBR.mjs";
+import { i as streamActivities, n as defaultSleep, r as pollingStream, t as createStreamActivity } from "./store-polling-BZt2Rf3D-Div-bJ_D.mjs";
+import { t as retryableLazy } from "./retryable-lazy-DZWmHpii-DpTc5PIP.mjs";
+import { i as syncReads, n as project, r as projectSync, t as concernedMessageId } from "./project-CQ4VUibA.mjs";
+import { i as idempotentReplay, n as decodeCause } from "./store-codec-pAG2oPgQ-SqDXlPBR.mjs";
+import { t as pollPresence } from "./store-presence-polling-JuAy2Ck2-Dh-g_KYM.mjs";
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/store-redis-notify-ys_-VrSP.js
 const key = ({ participant, field }) => JSON.stringify([participant, field]);
 function presenceRecovery({ read, deliver, isActive }) {
 	const fields = /* @__PURE__ */ new Map();
@@ -645,11 +645,12 @@ end
 `;
 /**
 * KEYS: counter.
-* ARGV: sessionId, nowMs, n, served consumers, origin index or '', then per
-* event: id, type, payloadJson, causeJson or '', targets.
+* ARGV: sessionId, nowMs, n, served consumers, origin index or '',
+* ifLastIndex or '', then per event: id, type, payloadJson, causeJson or '',
+* targets.
 * Returns ['empty', hasPending] | ['ok', firstIndex, hasPending] |
-* ['dup', hasPending, ...indexes] | ['partial', count] |
-* ['superseded', position] | ['cleared', originIndex] |
+* ['dup', hasPending, head, ...indexes] | ['partial', count, head] |
+* ['superseded', position] | ['cleared', originIndex] | ['moved', head] |
 * ['index', type, after].
 */
 const APPEND_LUA = `${BASE_LUA}${CURSOR_LUA}
@@ -657,7 +658,7 @@ local now, n = ARGV[2], tonumber(ARGV[3])
 use_served(ARGV[4])
 if n == 0 then return { 'empty', has_pending() } end
 local ids = {}
-for i = 1, n do ids[i] = ARGV[5 + (i - 1) * 5 + 1] end
+for i = 1, n do ids[i] = ARGV[6 + (i - 1) * 5 + 1] end
 local owners = owners_of(read_bounds(ids))
 local base = total
 local dups = {}
@@ -665,18 +666,18 @@ for i = 1, n do
   if owners[i] then dups[#dups + 1] = owners[i] end
 end
 if #dups == n then
-  local res = { 'dup', has_pending() }
+  local res = { 'dup', has_pending(), tostring(total) }
   for i = 1, #dups do res[#res + 1] = dups[i] end
   return res
 end
-if #dups > 0 then return { 'partial', tostring(#dups) } end
+if #dups > 0 then return { 'partial', tostring(#dups), tostring(total) } end
 local origin = ARGV[5]
 if origin ~= '' and tonumber(origin) <= boundary then return { 'cleared', origin } end
 -- The attempt-currency fence: a cause's head row must still be its cursor's
 -- head, at that attempt, not dead-lettered.
 local refs, fenced = {}, {}
 for i = 1, n do
-  local raw = ARGV[5 + (i - 1) * 5 + 4]
+  local raw = ARGV[6 + (i - 1) * 5 + 4]
   if raw ~= '' then
     local cause = cjson.decode(raw)
     local index = tonumber(cause.index)
@@ -696,16 +697,18 @@ for k, cause in ipairs(fenced) do
   end
   if served_has(cause.consumer) then pending_fast = true end
 end
+local expected = ARGV[6]
+if expected ~= '' and tonumber(expected) ~= total then return { 'moved', tostring(total) } end
 local batch = {}
 for i = 1, n do
-  local o = 5 + (i - 1) * 5
+  local o = 6 + (i - 1) * 5
   batch[i] = { idx = base + i, type = ARGV[o + 2], targets = targets_of(ARGV[o + 5]) }
 end
 local planned, missing, after = plan(batch, base)
 if not planned then return { 'index', missing, tostring(after) } end
 local marks = {}
 for i = 1, n do
-  local o = 5 + (i - 1) * 5
+  local o = 6 + (i - 1) * 5
   local field = tostring(base + i)
   redis.call('XADD', LOG, field .. '-0',
     'id', ARGV[o + 1], 'type', ARGV[o + 2], 'payload', ARGV[o + 3],
@@ -2040,6 +2043,12 @@ function createRedisStoreCore(options) {
 				const suppliedIds = events.filter((e) => e.id !== void 0).map((e) => e.id);
 				if (new Set(suppliedIds).size !== suppliedIds.length) throw new A2Error("PARTIAL_DUPLICATE_BATCH", "batch contains the same event id more than once");
 				const now = clock.now().getTime();
+				const ifLastIndex = appendOptions?.ifLastIndex;
+				const conditionalAt = (head) => ifLastIndex === void 0 ? void 0 : {
+					sessionId,
+					ifLastIndex,
+					head: Number(head)
+				};
 				const withIds = events.map((e) => ({
 					id: e.id ?? generateId(),
 					type: e.type,
@@ -2054,6 +2063,7 @@ function createRedisStoreCore(options) {
 					withIds.length,
 					servedArg(appendOptions?.consumers),
 					appendOptions?.originIndex ?? "",
+					ifLastIndex ?? "",
 					...withIds.flatMap((e, i) => [
 						e.id,
 						e.type,
@@ -2069,13 +2079,14 @@ function createRedisStoreCore(options) {
 				};
 				if (verdict === "cleared") throw sessionClearedError(`scheduled work from event ${reply[1]} was cleared in session '${sessionId}'`);
 				if (verdict === "superseded") throw supersededAttemptError(sessionId, withIds[Number(reply[1]) - 1].cause);
-				if (verdict === "partial") throw new A2Error("PARTIAL_DUPLICATE_BATCH", `batch mixes ${reply[1]} already-appended and ${events.length - Number(reply[1])} fresh events`);
+				if (verdict === "moved") throw lastIndexMismatchError(sessionId, ifLastIndex, Number(reply[1]));
+				if (verdict === "partial") throw duplicateBatchError(`batch mixes ${reply[1]} already-appended and ${events.length - Number(reply[1])} fresh events`, conditionalAt(reply[2]));
 				if (verdict === "dup") {
 					const hasPending = reply[1] === "1";
-					const firstIndex = Math.min(...reply.slice(2).map(Number));
+					const firstIndex = Math.min(...reply.slice(3).map(Number));
 					const { rows: existing, clearIndex } = await retryAfterGap(() => readBoundedRange(sessionId, firstIndex - 1, firstIndex + events.length - 1));
 					if (firstIndex < clearIndex) throw new A2Error("STORE_UNAVAILABLE", `session '${sessionId}' was cleared while an append retry replayed; retry it`);
-					const replayed = idempotentReplay(events, existing);
+					const replayed = idempotentReplay(events, existing, conditionalAt(reply[2]));
 					await publish(notifyChannel(sessionId), wakeMessage(firstIndex + events.length - 1, now, []));
 					return {
 						events: replayed,
@@ -2674,11 +2685,16 @@ function createRedisNotifyStore(options) {
 	*/
 	let subscriberGate = null;
 	const gatedSubscriber = () => {
-		subscriberGate ??= getSubscriber().then(async (conn) => {
+		if (subscriberGate) return subscriberGate;
+		const gate = getSubscriber().then(async (conn) => {
 			await conn.call("echo", "ready");
 			return conn;
 		});
-		return subscriberGate;
+		subscriberGate = gate;
+		gate.catch(() => {
+			if (subscriberGate === gate) subscriberGate = null;
+		});
+		return gate;
 	};
 	const acquireChannel = async (channel) => {
 		const existing = subscriptions.get(channel);
@@ -3262,12 +3278,6 @@ local out = {}
 for i = 1, #KEYS do out[i] = redis.call('HGETALL', KEYS[i]) end
 return out
 `;
-/** A person's roots posted at or after ARGV[1]. KEYS: messages, their roots by creation time. */
-const RECENT = `
-local ids = redis.call('ZRANGEBYSCORE', KEYS[2], ARGV[1], '+inf')
-if #ids == 0 then return {} end
-return redis.call('HMGET', KEYS[1], unpack(ids))
-`;
 /**
 * What an event reads before it applies, in one script so it reads the primary,
 * where the position check runs: a replica can lag it. Nothing, when the
@@ -3396,8 +3406,6 @@ function redisTables(send, prefix, options = {}) {
 		mention: (actor) => `${p}:i:mn:${actor}`,
 		attachment: (id) => `${p}:i:at:${id}`,
 		from: (from) => `${p}:i:f:${from}`,
-		/** A person's roots, by when they were posted: for the echo check. */
-		rootsBy: (principal) => `${p}:rr:${principal}`,
 		label: (token) => `${p}:i:${token}`,
 		copies: (id) => `${p}:cp:${id}`
 	};
@@ -3506,7 +3514,6 @@ function redisTables(send, prefix, options = {}) {
 				re: m.re,
 				c: m.channel,
 				t: m.text.toLowerCase(),
-				ca: Date.parse(m.createdAt),
 				d: m.deleted
 			};
 			out.push([
@@ -3561,12 +3568,6 @@ function redisTables(send, prefix, options = {}) {
 					id,
 					id
 				]);
-				else out.push([
-					"ZADD",
-					k.rootsBy(m.by.principal),
-					String(meta.ca),
-					id
-				]);
 			}
 			if (change.message.terms) {
 				const old = read.message;
@@ -3887,9 +3888,6 @@ function redisTables(send, prefix, options = {}) {
 				return message ? [message] : [];
 			});
 		},
-		async recentRoots(principal, since) {
-			return (await evaluate(RECENT, [k.messages, k.rootsBy(principal)], [since])).map((row) => parse(row)).sort((a, b) => a.id - b.id);
-		},
 		async close() {}
 	};
 }

package/dist/{reducer-CjmvZSAb-D_OSISmj.mjs → reducer-Bswr11ar-P324o9vn.mjs}

@@ -1,5 +1,5 @@
-import { a as isSessionCleared } from "./session-clear-wHd5GCpZ-BnKSxReK.mjs";
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/reducer-CjmvZSAb.js
+import { o as isSessionCleared } from "./session-clear-XJYpmUpg-2q8l_FJR.mjs";
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/reducer-Bswr11ar.js
 /**
 * Run a Standard Schema validator, requiring a synchronous result.
 * Validators must be synchronous (specs/a2-api.md §1) — an async one is

package/dist/{reducer-CYPHsSmd-BQIfozGi.d.mts → reducer-CYPHsSmd-BXjGiptm.d.mts}

@@ -1,4 +1,4 @@
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/reducer-CYPHsSmd.d.ts
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/reducer-CYPHsSmd.d.ts
 //#region src/standard-schema.d.ts
 /**
  * The Standard Schema interface, vendored per the spec's guidance

package/dist/{reducers-DJzVpXwM.mjs → reducers-DcENwtwZ.mjs}

@@ -1,10 +1,10 @@
 import { S as storable, _ as RemoteWatcherId, c as ChannelPath, d as LabelKey, g as MessageText, h as MessageId, i as Attachment, l as Emoji, n as ActorId, o as Author, p as Labels, u as Handle, v as SCOPE_MAX, y as SeenActorKind } from "./schemas-DBmUO6pr.mjs";
 import { a as Link, i as ExternalTarget, n as ExternalEvent, o as Origin } from "./external-D3p5T57R.mjs";
 import { n as setOwn, t as own } from "./own-OwgPWdmh.mjs";
-import { a as reducer, i as makeReducerBuilder, t as assertSyncSchema } from "./reducer-CjmvZSAb-D_OSISmj.mjs";
-import { n as foldMessages, t as foldActors } from "./folds-BDMSxBUf.mjs";
+import { a as reducer, i as makeReducerBuilder, t as assertSyncSchema } from "./reducer-Bswr11ar-P324o9vn.mjs";
+import { n as foldMessages, t as foldActors } from "./folds-Cu9Q9zyQ.mjs";
 import { z } from "zod";
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/contract-CWukt01d.js
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/contract-DqfBSIqJ.js
 function contract(options) {
 	for (const type of Object.keys(options.events ?? {})) if (type.startsWith("a2.")) throw new TypeError(`contract '${String(options.name)}': event types starting with 'a2.' are reserved`);
 	return defineContract(options);
@@ -80,6 +80,14 @@ const boardEvents = {
 		*/
 		importedBy: ActorId.optional()
 	}),
+	/**
+	* A channel made before anything posted to it. A post makes one too, with no event of its own:
+	* this is only for one that's empty. It names no message, so it carries no `id`.
+	*/
+	"channel.created": z.object({
+		channel: ChannelPath,
+		by: Author
+	}),
 	/** A message's links changed: an edit linked something new, or the platform sent what a link says. */
 	"message.linked": z.object({
 		id: MessageId,
@@ -138,9 +146,7 @@ const boardEvents = {
 		target: ExternalTarget,
 		external: z.object({
 			thread: ExternalTarget,
-			message: z.string().min(1).max(300),
-			/** Posted with its author's own platform token, so it shows as them. Older receipts have none. */
-			asUser: z.literal(true).optional()
+			message: z.string().min(1).max(300)
 		}),
 		/**
 		* (server) The principal of the sync elsewhere that recorded it: its copy is that sync's to
@@ -179,22 +185,6 @@ const boardEvents = {
 		* signs in, whatever its ID or kind, so sync never writes as it. Others have none.
 		*/
 		host: z.literal(true).optional()
-	}),
-	/**
-	* A platform actor (`slack:user:U0456`) is the same person as a principal
-	* (`vercel:user:…`): for display, `--by`, and mentions, never for permissions.
-	* `method` says how it was proved: a one-time code posted from that account,
-	* or the account's own sign-in (`consent`).
-	*/
-	"actor.linked": z.object({
-		actor: ActorId,
-		to: ActorId,
-		method: z.enum(["code", "consent"]),
-		by: Author
-	}),
-	"actor.unlinked": z.object({
-		actor: ActorId,
-		by: Author
 	})
 };
 const BOARD_SESSION = "board";
@@ -328,7 +318,9 @@ const StoredPrincipal = z.object({
 		/** The board's own Vercel team, as the board knew it when it verified the token. */
 		team: z.string().max(200).optional()
 	}).optional(),
-	scope: z.string().max(SCOPE_MAX).optional()
+	scope: z.string().max(SCOPE_MAX).optional(),
+	/** The board token it came with: what it stores stops when the token does. */
+	token: z.string().min(1).max(64).optional()
 });
 /** A watcher as a board on `http()` registers it: its tail, and when it runs. */
 const WatcherSpec = z.object({
@@ -350,11 +342,13 @@ const registryContract = contract({
 		/** Where to wake it: `<url>/wake`. Without one, it pulls on its own. */
 		url: z.string().url().max(500).nullable(),
 		watch: z.record(RemoteWatcherId, WatcherSpec),
-		/** Its sync entries: with any, its sync subscribes too, to every post, change, and thread sync where it may sync. Older registrations have none. */
+		/**
+		* Its sync entries: with any, its sync subscribes too, to every post, change, and thread sync
+		* where it may sync. Older registrations have none.
+		*/
 		sync: z.array(z.object({
 			key: z.string().min(1).max(64),
-			platform: z.string().min(1).max(64),
-			signIn: z.boolean()
+			platform: z.string().min(1).max(64)
 		})).max(32).optional(),
 		/** `watchersHash(watch)`, which every wake-up carries so the board can tell it's stale. */
 		hash: z.string().min(1).max(100)
@@ -444,31 +438,53 @@ const schedulesContract = contract({
 	}
 });
 const SCHEDULES_SESSION = "schedules";
+const Grant = z.union([z.literal("all"), z.array(z.string().min(1).max(16)).max(8)]);
+/** A `can`, as config writes it: board() checks it before it's kept. */
+const Can = z.union([Grant, z.record(z.string().min(1).max(300), Grant)]);
+const ClaimValue = z.string().min(1).max(1e3);
 /**
-* One-time codes for linking accounts, outside the board log: a code is a secret
-* until it's used, and only its hash is kept. Session `identity`.
+* Who the board trusts beside its code's rules, outside the board log: grants, and the tokens it
+* issued, of which only a hash is kept. Session `access`. A grant's and a token's ID is the index
+* of the event that made it.
 */
-const identityContract = contract({
-	name: "board-identity",
+const accessContract = contract({
+	name: "board-access",
 	events: {
-		"identity.code_issued": z.object({
-			hash: z.string().min(1).max(128),
-			/** Who the account it's posted from links to. */
-			principal: ActorId,
-			/** The sync entry it must be posted through. */
-			sync: z.string().min(1).max(64),
-			expiresAt: z.string().max(64)
+		/** A grant, or a new `can` for the grant with this issuer and claims. */
+		"grant.set": z.object({
+			issuer: z.string().min(1).max(1e3),
+			claims: z.record(z.string().min(1).max(200), z.union([ClaimValue, z.array(ClaimValue).min(1).max(32)])),
+			can: Can,
+			by: ActorId
+		}),
+		"grant.revoked": z.object({
+			id: z.number().int().positive(),
+			by: ActorId
+		}),
+		"token.minted": z.object({
+			/** The secret's SHA-256, hex. */
+			hash: z.string().regex(/^[0-9a-f]{64}$/),
+			name: z.string().min(1).max(64),
+			/** Who it acts as, its scope narrowed to what the token may do. */
+			minter: StoredPrincipal,
+			profile: z.string().min(1).max(32).nullable(),
+			avatar: z.string().max(2048).nullable(),
+			session: z.string().min(1).max(128).nullable(),
+			/** A person's handle and name when they minted it. */
+			handle: Handle.nullable(),
+			personName: z.string().min(1).max(128).nullable(),
+			expiresAt: Millis,
+			/** The token it was minted with, which it stops with. */
+			parent: z.number().int().positive().nullable(),
+			by: ActorId
 		}),
-		/** The first account to post it wins; any later post is just a message. */
-		"identity.code_used": z.object({
-			hash: z.string().min(1).max(128),
-			actor: ActorId,
-			/** The message that used it (`externalMessageKey`): only a retry of that one claims it again. */
-			message: z.string().max(1024).optional()
+		"token.revoked": z.object({
+			id: z.number().int().positive(),
+			by: ActorId
 		})
 	}
 });
-const IDENTITY_SESSION = "identity";
+const ACCESS_SESSION = "access";
 //#endregion
 //#region src/contract/reducers.ts
 const messagesReducer = reducer({
@@ -487,19 +503,24 @@ reducer({
 	if (event.type === "message.posted") setOwn(state, event.id, event.index);
 	return state;
 });
+const emptyChannel = (path) => ({
+	path,
+	lastIndex: 0,
+	messages: 0,
+	threads: 0
+});
 const channelsReducer = reducer({
 	contract: boardContract,
-	name: "board.channels.v1",
+	name: "board.channels.v2",
 	initialState: {}
 }).fold((state, event) => {
+	if (event.type === "channel.created") {
+		if (!own(state, event.payload.channel)) setOwn(state, event.payload.channel, emptyChannel(event.payload.channel));
+		return state;
+	}
 	if (event.type !== "message.posted") return state;
 	const { channel, re } = event.payload;
-	const entry = own(state, channel) ?? setOwn(state, channel, {
-		path: channel,
-		lastIndex: 0,
-		messages: 0,
-		threads: 0
-	});
+	const entry = own(state, channel) ?? setOwn(state, channel, emptyChannel(channel));
 	entry.lastIndex = event.index;
 	entry.messages += 1;
 	if (re === null) entry.threads += 1;
@@ -510,32 +531,8 @@ const actorsReducer = reducer({
 	name: "board.actors.v2",
 	initialState: {
 		byId: {},
-		byHandle: {},
-		links: {}
+		byHandle: {}
 	}
 }).fold(foldActors);
-const identityCodesReducer = reducer({
-	contract: identityContract,
-	name: "board.identity-codes.v1",
-	initialState: {}
-}).fold((state, event) => {
-	if (event.type === "identity.code_issued") {
-		const { hash, principal, sync, expiresAt } = event.payload;
-		state[hash] ??= {
-			principal,
-			sync,
-			expiresAt,
-			usedBy: null,
-			usedIn: null
-		};
-	} else if (event.type === "identity.code_used") {
-		const code = state[event.payload.hash];
-		if (code && code.usedBy === null) {
-			code.usedBy = event.payload.actor;
-			code.usedIn = event.payload.message ?? null;
-		}
-	}
-	return state;
-});
 //#endregion
-export { BOARD_SESSION as _, IDENTITY_SESSION as a, SCHEDULES_SESSION as c, inboxContract as d, inboxSession as f, watchSession as g, watchContract as h, messagesReducer as i, boardContract as l, schedulesContract as m, channelsReducer as n, INBOXES_SESSION as o, registryContract as p, identityCodesReducer as r, REGISTRY_SESSION as s, actorsReducer as t, identityContract as u };
+export { INBOXES_SESSION as a, accessContract as c, inboxSession as d, registryContract as f, BOARD_SESSION as g, watchSession as h, ACCESS_SESSION as i, boardContract as l, watchContract as m, channelsReducer as n, REGISTRY_SESSION as o, schedulesContract as p, messagesReducer as r, SCHEDULES_SESSION as s, actorsReducer as t, inboxContract as u };

package/dist/{retryable-lazy-DZWmHpii-Bye-W8q7.mjs → retryable-lazy-DZWmHpii-DpTc5PIP.mjs}

@@ -1,4 +1,4 @@
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/retryable-lazy-DZWmHpii.js
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/retryable-lazy-DZWmHpii.js
 const retryableLazy = (initialize) => {
 	let current = null;
 	const get = () => {

package/dist/{scheduler-task-X1SToDjP-BVoWuInI.mjs → scheduler-task-X1SToDjP-D2Il2rln.mjs}

@@ -1,4 +1,4 @@
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/scheduler-task-X1SToDjP.js
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/scheduler-task-X1SToDjP.js
 const recordOf = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 const validName = (value) => typeof value === "string" && value.length > 0;
 const validDueAt = (value) => typeof value === "number" && Number.isInteger(value) && value % 1e3 === 0;

package/dist/{serve-G9RuaDSr.mjs → serve-CTmow-YH.mjs}

@@ -1,10 +1,10 @@
-import { t as BoardError } from "./client-D0Px7KzF.mjs";
-import { s as localTokenFile } from "./node-Zd_C-gxP.mjs";
-import { t as board } from "./server-BixV_byP.mjs";
-import { t as oidcTokens } from "./tokens-CC3izSNr.mjs";
-import { t as a2 } from "./a2-HUbQJ0RD.mjs";
-import { a as fsBlob } from "./blob-DdbpJqN1.mjs";
-import { t as localScheduler } from "./local-DhkrAqPP.mjs";
+import { u as BoardError } from "./errors-CJXhhzvT.mjs";
+import { s as localTokenFile } from "./node-BgeGcwX0.mjs";
+import { t as board } from "./server-DG8D6VV0.mjs";
+import { t as oidcTokens } from "./tokens-Dnyd_y1n.mjs";
+import { t as a2 } from "./a2-DngWY2Eb.mjs";
+import { a as fsBlob } from "./blob-WbB2DJKn.mjs";
+import { t as localScheduler } from "./local-C76Fy5ad.mjs";
 import { mkdir, rm, writeFile } from "node:fs/promises";
 import { userInfo } from "node:os";
 import { dirname, join, resolve } from "node:path";

package/dist/{server-qgez0Xny-D5mLfqFQ.d.mts → server-B9gu0qi1-DI1WvcVK.d.mts}

@@ -1,6 +1,6 @@
-import { a as PresenceDefs, c as PresenceSnapshot, d as WithPresence, i as EventDefs, l as Reducer, n as Contract, o as PresenceMap, r as ContractEvent, s as PresencePatch, t as AppendInput, u as RegisteredReducer } from "./reducer-CYPHsSmd-BQIfozGi.mjs";
-import { r as Event } from "./store-D0MhBvg6-4Z2L0Kqd.mjs";
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/session-clear-D1PFe7xl.d.ts
+import { a as PresenceDefs, c as PresenceSnapshot, d as WithPresence, i as EventDefs, l as Reducer, n as Contract, o as PresenceMap, r as ContractEvent, s as PresencePatch, t as AppendInput, u as RegisteredReducer } from "./reducer-CYPHsSmd-BXjGiptm.mjs";
+import { r as Event } from "./store-DEzcHZOA-B-5vhxef.mjs";
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/session-clear-vfonou9S.d.ts
 //#region src/session-clear.d.ts
 /** Reserved type of the marker a clear appends. */
 declare const CLEAR_EVENT_TYPE = "a2.cleared";
@@ -10,7 +10,7 @@ type SessionCleared = Event & {
   payload: null;
 };
 //#endregion
-//#region ../../node_modules/.pnpm/experimental-a2@0.22.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__52060f00b21aecfab049c27fa3abd2f9/node_modules/experimental-a2/dist/server-qgez0Xny.d.ts
+//#region ../../node_modules/.pnpm/experimental-a2@0.24.0_@upstash+qstash@2.12.0_@vercel+queue@0.7.0_ai@7.0.130_zod@4.6.5__b1e2c243a963f2620a5d202817417c26/node_modules/experimental-a2/dist/server-B9gu0qi1.d.ts
 //#region src/session-socket.d.ts
 /**
  * The structural socket `sessionsSocket` speaks against — satisfied
@@ -148,6 +148,12 @@ type SessionDispatch<D extends EventDefs> = (...events: AppendInput<D>[]) => Pro
 type SessionAppend<D extends EventDefs> = SessionDispatch<D> & {
   /** Commit, then hand pending work directly to configured scheduler. */
   dispatch: SessionDispatch<D>;
+  /**
+   * Append only while `index` is the session's head, checked in the same
+   * atomic step as the write. Otherwise nothing is written and it throws
+   * `LAST_INDEX_MISMATCH`, with the head as `details.index`.
+   */
+  ifLastIndex(index: number, ...events: AppendInput<D>[]): Promise<ContractEvent<D>[]>;
 };
 type ConsumerAppend<D extends EventDefs> = (name: string, ...events: AppendInput<D>[]) => Promise<ContractEvent<D>[]>;
 type ScheduleDelay = `${number}${"ms" | "s" | "m" | "h" | "d"}`;

package/dist/{server-BixV_byP.mjs → server-DG8D6VV0.mjs}

@@ -1,5 +1,5 @@
-import { t as createBoard } from "./exports-BG-0Wyn-.mjs";
-import { t as http } from "./backend-http-Bmp0IgD3.mjs";
+import { t as createBoard } from "./exports-CWIdN0Ub.mjs";
+import { t as http } from "./backend-http-D8mUzuKQ.mjs";
 //#region src/server/index.ts
 /**
 * The handle on a board. With a `backend`, the board lives there: `a2()` keeps it in this
@@ -9,8 +9,8 @@ import { t as http } from "./backend-http-Bmp0IgD3.mjs";
 function board(options = {}) {
 	return createBoard(options, {
 		http: () => http(),
-		sync: () => import("./engine-DQxXk7dX.mjs"),
-		serving: () => import("./serving-B75Y4BF-.mjs")
+		sync: () => import("./engine-DurYIRt8.mjs"),
+		serving: () => import("./serving-DBFRo6U_.mjs")
 	});
 }
 //#endregion