@vercel/board 0.30.0 → 0.31.0

package/dist/{backend-http-3PoBYQoo.d.mts → backend-http-BRrRbjRx.d.mts}

@@ -1,6 +1,6 @@
-import { t as Actor, x as Attachment } from "./folds-8wRRXjAt.mjs";
-import { A as InboxItem, Ct as SyncCopiesView, D as IdentityView, Et as SyncFindView, H as MessageView, It as ThreadView, L as LinkedAccount, Lt as ThreadsPage, Mt as SyncThreadView, Pt as SyncedView, S as EventsPage, U as MessagesPage, Ut as UploadTicket, V as Me, b as Discovery, ft as SourceJoin, ht as SourceRead, k as InboxEntry, o as ProfileOption, q as PersonView, st as ScheduleView, tt as RegistrationView, v as ChannelView, xt as SyncCodeView, z as MatchView } from "./client-CjAatpV4.mjs";
-import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-n3hajfrD.mjs";
+import { t as Actor, x as Attachment } from "./folds-DLUzfibJ.mjs";
+import { At as ThreadsPage, B as MatchView, C as EventsPage, Dt as SyncedView, Et as SyncThreadView, Ft as TokenView, H as Me, M as InboxItem, U as MessageView, W as MessagesPage, dt as SourceJoin, j as InboxEntry, k as GrantView, kt as ThreadView, mt as SourceRead, o as ProfileOption, st as ScheduleView, tt as RegistrationView, v as ChannelView, vt as SyncCopiesView, x as Discovery, xt as SyncFindView, zt as UploadTicket } from "./client-COfYrgfV.mjs";
+import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-Bob-5CM7.mjs";
 //#region src/server/backend-http.d.ts
 type HttpOptions = {
   /**
@@ -46,17 +46,18 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     channels: ChannelView[];
     cursor: string;
   }>;
+  createChannel: (caller: Caller, input: {
+    path: string;
+  }, signal: AbortSignal) => Promise<{
+    channel: ChannelView;
+    created: boolean;
+  }>;
   actors: (caller: Caller, input: {
     [x: string]: never;
   }, signal: AbortSignal) => Promise<{
-    actors: (Actor & {
-      person?: PersonView;
-    })[];
+    actors: Actor[];
     cursor: string;
   }>;
-  identity: (caller: Caller, input: {
-    [x: string]: never;
-  }, signal: AbortSignal) => Promise<IdentityView>;
   messages: (caller: Caller, input: {
     channel?: string | undefined;
     re?: string | undefined;
@@ -169,6 +170,45 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     schedule: ScheduleView;
     canceled: boolean;
   }>;
+  grants: (caller: Caller, input: {
+    [x: string]: never;
+  }, signal: AbortSignal) => Promise<{
+    grants: GrantView[];
+  }>;
+  createGrant: (caller: Caller, input: {
+    issuer: string;
+    claims: Record<string, string | string[]>;
+    can?: "all" | string[] | Record<string, "all" | string[]> | undefined;
+  }, signal: AbortSignal) => Promise<{
+    grant: GrantView;
+    created: boolean;
+  }>;
+  revokeGrant: (caller: Caller, input: {
+    id: string;
+  }, signal: AbortSignal) => Promise<{
+    revoked: boolean;
+  }>;
+  tokens: (caller: Caller, input: {
+    [x: string]: never;
+  }, signal: AbortSignal) => Promise<{
+    tokens: TokenView[];
+  }>;
+  createToken: (caller: Caller, input: {
+    name: string;
+    can?: "all" | string[] | Record<string, "all" | string[]> | undefined;
+    profile?: string | undefined;
+    avatar?: string | undefined;
+    session?: string | undefined;
+    expires?: string | undefined;
+  }, signal: AbortSignal) => Promise<{
+    token: TokenView;
+    secret: string;
+  }>;
+  revokeToken: (caller: Caller, input: {
+    id: string;
+  }, signal: AbortSignal) => Promise<{
+    revoked: boolean;
+  }>;
   upload: (caller: Caller, input: {
     data: Uint8Array;
     name: string | null;
@@ -206,7 +246,6 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     sync?: {
       key: string;
       platform: string;
-      signIn: boolean;
     }[] | undefined;
     url?: string | null | undefined;
     path?: null | undefined;
@@ -219,7 +258,6 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     sync?: {
       key: string;
       platform: string;
-      signIn: boolean;
     }[] | undefined;
     url?: null | undefined;
     path: string;
@@ -443,7 +481,6 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     external: {
       thread: string;
       message: string;
-      asUser?: true | undefined;
     };
     files?: string[] | null | undefined;
   } | {
@@ -470,22 +507,13 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
     thread: string;
   }, signal: AbortSignal) => Promise<SyncThreadView>;
   syncFind: (caller: Caller, input: {
-    code?: string | undefined;
     post?: string | undefined;
     thread?: string | undefined;
     message?: string | undefined;
-    account?: string | undefined;
-    person?: string | undefined;
   }, signal: AbortSignal) => Promise<SyncFindView>;
   syncCopies: (caller: Caller, input: {
     message: string[];
   }, signal: AbortSignal) => Promise<SyncCopiesView>;
-  syncRoots: (caller: Caller, input: {
-    by: string;
-    since: number;
-  }, signal: AbortSignal) => Promise<{
-    roots: MessageView[];
-  }>;
   inboxPush: (caller: Caller, input: {
     key: string;
   } & {
@@ -631,30 +659,6 @@ declare function createHttp(url: string | undefined, options: HttpOptions, envir
   }, signal: AbortSignal) => Promise<{
     events: InboxEntry[];
   }>;
-  syncCode: (caller: Caller, input: {
-    sync: string;
-  }, signal: AbortSignal) => Promise<SyncCodeView>;
-  syncAccount: (caller: Caller, input: {
-    sync: string;
-    account: {
-      id: string;
-      handle: string;
-      name: string;
-      isBot: boolean;
-      avatar: string | null;
-    };
-    code: string;
-    message?: string | undefined;
-    method?: "code" | "consent" | undefined;
-  }, signal: AbortSignal) => Promise<{
-    person: string;
-    link: LinkedAccount;
-  }>;
-  syncUnlink: (caller: Caller, input: {
-    account: string;
-  }, signal: AbortSignal) => Promise<{
-    ok: true;
-  }>;
   routes: BackendRoute[];
   keeps: boolean;
   bind(next: BoardBinding): void;

package/dist/{backend-http-BPaNYLWj.mjs → backend-http-CvUKOn-m.mjs}

@@ -1,7 +1,7 @@
 import "./files-SniSmeEr.mjs";
 import "./schemas-DBmUO6pr.mjs";
-import { a as METHODS, k as RegisterBody, n as compileWatcher, q as routes, t as canonicalWatchers } from "./watchers-hash-B_5b0-ZG.mjs";
-import { a as forbidden, d as createBoardClient, o as json, t as HttpError, u as BoardError } from "./errors-C_5rB8Iz.mjs";
+import { A as RegisterBody, W as routes, a as METHODS, n as compileWatcher, t as canonicalWatchers } from "./watchers-hash-BjwlnGD9.mjs";
+import { a as forbidden, d as createBoardClient, o as json, t as HttpError, u as BoardError } from "./errors-CJXhhzvT.mjs";
 import { a as keyId, n as DERIVED_ID, o as sha256, r as derivedId, t as waitUntil } from "./wait-until-Dw4XrIDQ.mjs";
 //#region src/server/registrant.ts
 /** Registering again this soon after the same registration only repeats it. */
@@ -186,12 +186,12 @@ const PROFILE = /^[A-Za-z][A-Za-z0-9-]{0,31}$/;
 const PROFILE_RULE = "ids start with a letter and use up to 32 letters, numbers, and hyphens";
 /**
 * What a board's own callers can't do on the board it uses, where they act as its project: what's
-* the project's own there (its registration, its sync, its links), and what's anyone's own there by
+* the project's own there (its registration, its sync, its links, who it trusts and the tokens it
+* mints, which would act as the project), and what's anyone's own there by
 * principal (editing, deleting, scheduling, and uploading, since a file is its uploader's to read
 * and attach until a message carries it), which the board it uses can't tell them apart for.
 */
 const PROJECTS_OWN = /* @__PURE__ */ new Set([
-	"identity",
 	"edit",
 	"delete",
 	"schedule",
@@ -203,19 +203,21 @@ const PROJECTS_OWN = /* @__PURE__ */ new Set([
 	"register",
 	"matches",
 	"ack",
+	"grants",
+	"createGrant",
+	"revokeGrant",
+	"tokens",
+	"createToken",
+	"revokeToken",
 	"syncImport",
 	"syncReceipt",
 	"syncThread",
 	"syncFind",
 	"syncCopies",
-	"syncRoots",
 	"inboxPush",
 	"inboxNext",
 	"inboxAck",
-	"inbox",
-	"syncCode",
-	"syncAccount",
-	"syncUnlink"
+	"inbox"
 ]);
 /**
 * A caller's handle as a profile on the board this one uses: `ada`, `ada-lovelace` for

package/dist/{backend-http-16SbvnAK.mjs → backend-http-D8mUzuKQ.mjs}

@@ -1,5 +1,5 @@
-import { r as createHttp } from "./backend-http-BPaNYLWj.mjs";
-import { i as environmentProfile, n as boardUrl, r as connect } from "./node-D8Rtg1su.mjs";
+import { r as createHttp } from "./backend-http-CvUKOn-m.mjs";
+import { i as environmentProfile, n as boardUrl, r as connect } from "./node-BgeGcwX0.mjs";
 //#region src/backend-http/index.ts
 const environment = {
 	url: boardUrl,

package/dist/backend-http.d.mts

@@ -1,4 +1,4 @@
-import { n as HttpOptions, t as HttpBackend } from "./backend-http-3PoBYQoo.mjs";
+import { n as HttpOptions, t as HttpBackend } from "./backend-http-BRrRbjRx.mjs";
 //#region src/backend-http/index.default.d.ts
 /**
  * The board at `url`, which keeps the log. Outside Node there's no environment to find it or a

package/dist/backend-http.mjs

@@ -1,2 +1,2 @@
-import { t as http } from "./index.default-DhkgpfR2.mjs";
+import { t as http } from "./index.default-BUcwDaAe.mjs";
 export { http };

package/dist/backend-http.node.d.mts

@@ -1,4 +1,4 @@
-import { n as HttpOptions, t as HttpBackend } from "./backend-http-3PoBYQoo.mjs";
+import { n as HttpOptions, t as HttpBackend } from "./backend-http-BRrRbjRx.mjs";
 //#region src/backend-http/index.d.ts
 /**
  * The board at `url`, which keeps the log: this board uses it as this deployment. Without a

package/dist/backend-http.node.mjs

@@ -1,2 +1,2 @@
-import { t as http } from "./backend-http-16SbvnAK.mjs";
+import { t as http } from "./backend-http-D8mUzuKQ.mjs";
 export { http };

package/dist/{backend-vercel-Kd8nvW5A.mjs → backend-vercel-Ba8JDtqW.mjs}

@@ -1,6 +1,6 @@
-import { t as HttpError } from "./errors-C_5rB8Iz.mjs";
-import { c as loginHanded, d as vercelProjectFile, i as environmentProfile, t as asYou, u as vercelLogin } from "./node-D8Rtg1su.mjs";
-import { t as createVercel } from "./backend-vercel-C4Kee2-K.mjs";
+import { t as HttpError } from "./errors-CJXhhzvT.mjs";
+import { c as loginHanded, d as vercelProjectFile, i as environmentProfile, t as asYou, u as vercelLogin } from "./node-BgeGcwX0.mjs";
+import { t as createVercel } from "./backend-vercel-CmY9yZ9m.mjs";
 import { readFile } from "node:fs/promises";
 import { decodeJwt } from "jose";
 import { getVercelOidcToken } from "@vercel/oidc";

package/dist/{backend-vercel-qznuDxnN.d.mts → backend-vercel-BaSEUdwg.d.mts}

@@ -1,6 +1,6 @@
-import { t as Actor, x as Attachment } from "./folds-8wRRXjAt.mjs";
-import { A as InboxItem, Ct as SyncCopiesView, D as IdentityView, Et as SyncFindView, H as MessageView, It as ThreadView, L as LinkedAccount, Lt as ThreadsPage, Mt as SyncThreadView, Pt as SyncedView, S as EventsPage, U as MessagesPage, Ut as UploadTicket, V as Me, b as Discovery, ft as SourceJoin, ht as SourceRead, k as InboxEntry, o as ProfileOption, q as PersonView, st as ScheduleView, tt as RegistrationView, v as ChannelView, xt as SyncCodeView, z as MatchView } from "./client-CjAatpV4.mjs";
-import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-n3hajfrD.mjs";
+import { t as Actor, x as Attachment } from "./folds-DLUzfibJ.mjs";
+import { At as ThreadsPage, B as MatchView, C as EventsPage, Dt as SyncedView, Et as SyncThreadView, Ft as TokenView, H as Me, M as InboxItem, U as MessageView, W as MessagesPage, dt as SourceJoin, j as InboxEntry, k as GrantView, kt as ThreadView, mt as SourceRead, o as ProfileOption, st as ScheduleView, tt as RegistrationView, v as ChannelView, vt as SyncCopiesView, x as Discovery, xt as SyncFindView, zt as UploadTicket } from "./client-COfYrgfV.mjs";
+import { i as Caller, n as BackendRoute, r as BoardBinding } from "./backend-Bob-5CM7.mjs";
 //#region src/server/backend-vercel.d.ts
 type VercelOptions = {
   /** The team whose board it is: its ID (`team_…`) or its slug. In Node, by default your deployment's, or `VERCEL_ORG_ID`. */
@@ -47,17 +47,18 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
     channels: ChannelView[];
     cursor: string;
   }>;
+  createChannel: (caller: Caller, input: {
+    path: string;
+  }, signal: AbortSignal) => Promise<{
+    channel: ChannelView;
+    created: boolean;
+  }>;
   actors: (caller: Caller, input: {
     [x: string]: never;
   }, signal: AbortSignal) => Promise<{
-    actors: (Actor & {
-      person?: PersonView;
-    })[];
+    actors: Actor[];
     cursor: string;
   }>;
-  identity: (caller: Caller, input: {
-    [x: string]: never;
-  }, signal: AbortSignal) => Promise<IdentityView>;
   messages: (caller: Caller, input: {
     channel?: string | undefined;
     re?: string | undefined;
@@ -170,6 +171,45 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
     schedule: ScheduleView;
     canceled: boolean;
   }>;
+  grants: (caller: Caller, input: {
+    [x: string]: never;
+  }, signal: AbortSignal) => Promise<{
+    grants: GrantView[];
+  }>;
+  createGrant: (caller: Caller, input: {
+    issuer: string;
+    claims: Record<string, string | string[]>;
+    can?: "all" | string[] | Record<string, "all" | string[]> | undefined;
+  }, signal: AbortSignal) => Promise<{
+    grant: GrantView;
+    created: boolean;
+  }>;
+  revokeGrant: (caller: Caller, input: {
+    id: string;
+  }, signal: AbortSignal) => Promise<{
+    revoked: boolean;
+  }>;
+  tokens: (caller: Caller, input: {
+    [x: string]: never;
+  }, signal: AbortSignal) => Promise<{
+    tokens: TokenView[];
+  }>;
+  createToken: (caller: Caller, input: {
+    name: string;
+    can?: "all" | string[] | Record<string, "all" | string[]> | undefined;
+    profile?: string | undefined;
+    avatar?: string | undefined;
+    session?: string | undefined;
+    expires?: string | undefined;
+  }, signal: AbortSignal) => Promise<{
+    token: TokenView;
+    secret: string;
+  }>;
+  revokeToken: (caller: Caller, input: {
+    id: string;
+  }, signal: AbortSignal) => Promise<{
+    revoked: boolean;
+  }>;
   upload: (caller: Caller, input: {
     data: Uint8Array;
     name: string | null;
@@ -207,7 +247,6 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
     sync?: {
       key: string;
       platform: string;
-      signIn: boolean;
     }[] | undefined;
     url?: string | null | undefined;
     path?: null | undefined;
@@ -220,7 +259,6 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
     sync?: {
       key: string;
       platform: string;
-      signIn: boolean;
     }[] | undefined;
     url?: null | undefined;
     path: string;
@@ -444,7 +482,6 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
     external: {
       thread: string;
       message: string;
-      asUser?: true | undefined;
     };
     files?: string[] | null | undefined;
   } | {
@@ -471,22 +508,13 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
     thread: string;
   }, signal: AbortSignal) => Promise<SyncThreadView>;
   syncFind: (caller: Caller, input: {
-    code?: string | undefined;
     post?: string | undefined;
     thread?: string | undefined;
     message?: string | undefined;
-    account?: string | undefined;
-    person?: string | undefined;
   }, signal: AbortSignal) => Promise<SyncFindView>;
   syncCopies: (caller: Caller, input: {
     message: string[];
   }, signal: AbortSignal) => Promise<SyncCopiesView>;
-  syncRoots: (caller: Caller, input: {
-    by: string;
-    since: number;
-  }, signal: AbortSignal) => Promise<{
-    roots: MessageView[];
-  }>;
   inboxPush: (caller: Caller, input: {
     key: string;
   } & {
@@ -632,30 +660,6 @@ declare function createVercel(options: VercelOptions, environment: VercelEnviron
   }, signal: AbortSignal) => Promise<{
     events: InboxEntry[];
   }>;
-  syncCode: (caller: Caller, input: {
-    sync: string;
-  }, signal: AbortSignal) => Promise<SyncCodeView>;
-  syncAccount: (caller: Caller, input: {
-    sync: string;
-    account: {
-      id: string;
-      handle: string;
-      name: string;
-      isBot: boolean;
-      avatar: string | null;
-    };
-    code: string;
-    message?: string | undefined;
-    method?: "code" | "consent" | undefined;
-  }, signal: AbortSignal) => Promise<{
-    person: string;
-    link: LinkedAccount;
-  }>;
-  syncUnlink: (caller: Caller, input: {
-    account: string;
-  }, signal: AbortSignal) => Promise<{
-    ok: true;
-  }>;
   routes: BackendRoute[];
   keeps: boolean;
   sendsSchedulesHere: boolean;

package/dist/{backend-vercel-C4Kee2-K.mjs → backend-vercel-CmY9yZ9m.mjs}

@@ -1,10 +1,10 @@
 import { r as IMPORT_BYTES_MAX } from "./files-SniSmeEr.mjs";
 import { _ as RemoteWatcherId } from "./schemas-DBmUO6pr.mjs";
-import { a as METHODS, d as VERSION, k as RegisterBody, n as compileWatcher, t as canonicalWatchers } from "./watchers-hash-B_5b0-ZG.mjs";
-import { a as forbidden, f as duration, o as json, r as badRequest, s as notFound, t as HttpError } from "./errors-C_5rB8Iz.mjs";
+import { A as RegisterBody, a as METHODS, d as VERSION, n as compileWatcher, t as canonicalWatchers } from "./watchers-hash-BjwlnGD9.mjs";
+import { a as forbidden, f as duration, o as json, r as badRequest, s as notFound, t as HttpError } from "./errors-CJXhhzvT.mjs";
 import { o as sha256, r as derivedId } from "./wait-until-Dw4XrIDQ.mjs";
-import { a as wakePath, i as registrant, n as callerProfile, t as PROJECTS_OWN } from "./backend-http-BPaNYLWj.mjs";
-import { o as mediaType, r as fileName } from "./blob-DQK5prXT.mjs";
+import { a as wakePath, i as registrant, n as callerProfile, t as PROJECTS_OWN } from "./backend-http-CvUKOn-m.mjs";
+import { o as mediaType, r as fileName } from "./blob-WbB2DJKn.mjs";
 //#region src/server/backend-vercel.ts
 const PROFILE = /^[A-Za-z][A-Za-z0-9-]{0,31}$/;
 const SESSION = /^[A-Za-z0-9_.:-]{1,128}$/;
@@ -191,10 +191,13 @@ function createVercel(options, environment) {
 		if (!found) throw new HttpError(502, "remote_error", `Vercel's API names a channel it doesn't list: ${id}`);
 		return found;
 	}
-	/** A channel to post in, made the first time something posts to it, as on any board. */
-	async function channelToPost(who, name) {
+	/** The channel by `name`, made if it isn't there: `created` says whether this made it. */
+	async function ensureChannel(who, name) {
 		const found = await channelNamed(who, name);
-		if (found) return found;
+		if (found) return {
+			channel: found,
+			created: false
+		};
 		try {
 			const { channel } = await api(who, "POST", await onBoard(who, "/channels"), { body: {
 				operationId: operationId(),
@@ -202,15 +205,23 @@ function createVercel(options, environment) {
 			} });
 			channels = null;
 			named.set(name, channel);
-			return channel;
+			return {
+				channel,
+				created: true
+			};
 		} catch (error) {
 			if (error instanceof HttpError && error.code === "channel_name_taken") {
 				const made = await channelNamed(who, name);
-				if (made) return made;
+				if (made) return {
+					channel: made,
+					created: false
+				};
 			}
 			throw error;
 		}
 	}
+	/** A channel to post in, made the first time something posts to it, as on any board. */
+	const channelToPost = async (who, name) => (await ensureChannel(who, name)).channel;
 	/** The channels a filter names that `access` reads: one, a channel and those under it (`dev/`), or every one. */
 	async function channelsFor(who, filter, access) {
 		const readable = (channel) => access === null || access.readable(channel.name);
@@ -1072,18 +1083,24 @@ function createVercel(options, environment) {
 		},
 		async channels(caller) {
 			return {
-				channels: (await channelsFor(whoOf(caller), void 0, accessOf(caller))).map((channel) => ({
-					path: channel.name,
-					lastIndex: 0,
-					messages: 0,
-					threads: 0
-				})),
+				channels: (await channelsFor(whoOf(caller), void 0, accessOf(caller))).map((channel) => ({ path: channel.name })).sort((a, b) => a.path.localeCompare(b.path)),
 				cursor: cursorOf({
 					t: Date.now(),
 					feeds: {}
 				})
 			};
 		},
+		async createChannel(caller, { path }) {
+			checkCaller("createChannel", caller);
+			const access = accessOf(caller);
+			need(access, "read", path);
+			need(access, "post", path);
+			const { created } = await ensureChannel(whoOf(caller), path);
+			return {
+				channel: { path },
+				created
+			};
+		},
 		async actors(caller, _input, signal) {
 			const who = whoOf(caller);
 			const listed = (await all(who, await onBoard(who, "/actors"), "actors", {}, signal)).map((actor) => ({
@@ -1416,6 +1433,54 @@ function createVercel(options, environment) {
 			});
 			return { ok: true };
 		},
+		async grants(caller, _input, signal) {
+			checkCaller("grants", caller);
+			const who = whoOf(caller);
+			return api(who, "GET", await onBoard(who, "/grants"), signal ? { signal } : {});
+		},
+		async createGrant(caller, input, signal) {
+			checkCaller("createGrant", caller);
+			const who = whoOf(caller);
+			return api(who, "POST", await onBoard(who, "/grants"), {
+				body: {
+					operationId: operationId(),
+					...input
+				},
+				...signal ? { signal } : {}
+			});
+		},
+		async revokeGrant(caller, { id }, signal) {
+			checkCaller("revokeGrant", caller);
+			const who = whoOf(caller);
+			return api(who, "POST", await onBoard(who, `/grants/${encodeURIComponent(id)}/revoke`), {
+				body: { operationId: operationId() },
+				...signal ? { signal } : {}
+			});
+		},
+		async tokens(caller, _input, signal) {
+			checkCaller("tokens", caller);
+			const who = whoOf(caller);
+			return api(who, "GET", await onBoard(who, "/tokens"), signal ? { signal } : {});
+		},
+		async createToken(caller, input, signal) {
+			checkCaller("createToken", caller);
+			const who = whoOf(caller);
+			return api(who, "POST", await onBoard(who, "/tokens"), {
+				body: {
+					operationId: operationId(),
+					...input
+				},
+				...signal ? { signal } : {}
+			});
+		},
+		async revokeToken(caller, { id }, signal) {
+			checkCaller("revokeToken", caller);
+			const who = whoOf(caller);
+			return api(who, "POST", await onBoard(who, `/tokens/${encodeURIComponent(id)}/revoke`), {
+				body: { operationId: operationId() },
+				...signal ? { signal } : {}
+			});
+		},
 		async schedule(caller, input, signal) {
 			if (input.attachments?.length) throw notSupported("files on scheduled messages");
 			const who = whoOf(caller);

package/dist/backend-vercel.d.mts

@@ -1,4 +1,4 @@
-import { n as VercelOptions, t as VercelBackend } from "./backend-vercel-qznuDxnN.mjs";
+import { n as VercelOptions, t as VercelBackend } from "./backend-vercel-BaSEUdwg.mjs";
 //#region src/backend-vercel/index.default.d.ts
 /**
  * Your team's board, in Vercel's API. Outside Node there's no environment to find credentials or

package/dist/backend-vercel.mjs

@@ -1,4 +1,4 @@
-import { t as createVercel } from "./backend-vercel-C4Kee2-K.mjs";
+import { t as createVercel } from "./backend-vercel-CmY9yZ9m.mjs";
 //#region src/backend-vercel/index.default.ts
 /**
 * Your team's board, in Vercel's API. Outside Node there's no environment to find credentials or

package/dist/backend-vercel.node.d.mts

@@ -1,4 +1,4 @@
-import { n as VercelOptions, t as VercelBackend } from "./backend-vercel-qznuDxnN.mjs";
+import { n as VercelOptions, t as VercelBackend } from "./backend-vercel-BaSEUdwg.mjs";
 //#region src/backend-vercel/index.d.ts
 /** Where `token` comes from, in words: what `vb whoami` says. */
 export declare function credentialSource(): string;

package/dist/backend-vercel.node.mjs

@@ -1,2 +1,2 @@
-import { n as handTeam, r as vercel, t as credentialSource } from "./backend-vercel-Kd8nvW5A.mjs";
+import { n as handTeam, r as vercel, t as credentialSource } from "./backend-vercel-Ba8JDtqW.mjs";
 export { credentialSource, handTeam, vercel };

package/dist/{blob-CqILvdmr.d.mts → blob-Bx8QPWEd.d.mts}

@@ -1,5 +1,5 @@
-import "./folds-8wRRXjAt.mjs";
-import "./errors-87TVtXeb.mjs";
+import "./folds-DLUzfibJ.mjs";
+import "./errors-2vGs49Db.mjs";
 //#region src/server/blob.d.ts
 /**
  * Where attachments' bytes live. The board writes each file once, under a key