@antzsoft/chat-core 1.4.4 → 1.4.6

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { R as ResolvedCompressionConfig, L as LoginCredentials, A as AuthResponse, a as RegisterData, b as AuthTokens, U as User, C as CrossConversationSyncResponse, c as ConversationSyncResponse, d as AppConfig, S as SendMessagePayload, M as Message, e as CursorPaginatedResponse, f as MessageReactionsResponse, P as PaginatedResponse, g as MessageReceiptsResponse, h as ConversationListParams, i as Conversation, j as Participant, k as ConversationUnreadCount, l as UnreadSummary, m as UserPreferences, n as ResolvedConfig, F as ForwardMessagePayload, o as ForwardAckPayload, p as PersistStorage, q as PresignedUrlRequest, r as PresignedUrlResponse, s as FileResponse, t as CompletedPart, u as FileType, v as AntzChatConfig, w as UploadableFile, B as BatchUploadResult } from './storage-C8V7aVum.cjs';
-export { x as Attachment, y as CompressedFile, z as CompressionAlgorithm, D as CompressionConfig, E as ConversationType, G as ConversationUpdatedEvent, H as FileSizeLimits, I as ForwardResultPayload, J as LastReaction, K as MENTION_ALL_ID, N as MessageAckEvent, O as MessageContent, Q as MessageDeletedEvent, T as MessageDeletedForMeEvent, V as MessageDeliveredEvent, W as MessageForwardReference, X as MessageMetadata, Y as MessageReaction, Z as MessageReceiptEntry, _ as MessageReplyReference, $ as MessageStarUpdatedEvent, a0 as MessageUpdatedEvent, a1 as MessagesDeliveredEvent, a2 as MultipartPartUrl, a3 as MultipartUploadInfo, a4 as NewMessageEvent, a5 as OptimisticAttachment, a6 as PlatformCompressFn, a7 as PlatformUploadFn, a8 as PlatformUploadPartFn, a9 as QuietHours, aa as ReactionGroup, ab as ReactionUpdatedEvent, ac as ReactionUser, ad as ReadReceiptEvent, ae as ReplyAttachmentSnapshot, af as ResolvedFileSizeLimits, ag as SendMessageAttachment, ah as SyncDeletedForMe, ai as SyncDeliveredReceipt, aj as SyncParticipantChange, ak as SyncReactionEntry, al as SyncReactions, am as SyncReadReceipt, an as SyncStarEntry, ao as SystemMessageMetadata, ap as TypingIndicatorEvent, aq as UploadConfig, ar as UploadProgress, as as UserStatusEvent, at as resolveConfig, au as storageApi, av as uploadBatch } from './storage-C8V7aVum.cjs';
+import { R as ResolvedCompressionConfig, L as LoginCredentials, A as AuthResponse, a as RegisterData, b as AuthTokens, U as User, C as CrossConversationSyncResponse, c as ConversationSyncResponse, d as AppConfig, S as SendMessagePayload, M as Message, e as CursorPaginatedResponse, f as MessageReactionsResponse, P as PaginatedResponse, g as MessageReceiptsResponse, h as ConversationListParams, i as Conversation, j as Participant, k as ConversationUnreadCount, l as UnreadSummary, m as UserPreferences, n as ResolvedConfig, F as ForwardMessagePayload, o as ForwardAckPayload, p as PersistStorage, q as PresignedUrlRequest, r as PresignedUrlResponse, s as FileResponse, t as CompletedPart, u as FileType, v as AntzChatConfig, w as UploadableFile, B as BatchUploadResult } from './storage-DlxfLVqx.cjs';
+export { x as Attachment, y as CompressedFile, z as CompressionAlgorithm, D as CompressionConfig, E as ConversationType, G as ConversationUpdatedEvent, H as FileSizeLimits, I as ForwardResultPayload, J as LastReaction, K as MENTION_ALL_ID, N as MessageAckEvent, O as MessageContent, Q as MessageDeletedEvent, T as MessageDeletedForMeEvent, V as MessageDeliveredEvent, W as MessageForwardReference, X as MessageMetadata, Y as MessageReaction, Z as MessageReceiptEntry, _ as MessageReplyReference, $ as MessageStarUpdatedEvent, a0 as MessageUpdatedEvent, a1 as MessagesDeliveredEvent, a2 as MultipartPartUrl, a3 as MultipartUploadInfo, a4 as NewMessageEvent, a5 as OptimisticAttachment, a6 as PlatformCompressFn, a7 as PlatformUploadFn, a8 as PlatformUploadPartFn, a9 as QuietHours, aa as ReactionGroup, ab as ReactionUpdatedEvent, ac as ReactionUser, ad as ReadReceiptEvent, ae as ReplyAttachmentSnapshot, af as ResolvedFileSizeLimits, ag as SendErrorContext, ah as SendMessageAttachment, ai as SyncDeletedForMe, aj as SyncDeliveredReceipt, ak as SyncParticipantChange, al as SyncReactionEntry, am as SyncReactions, an as SyncReadReceipt, ao as SyncStarEntry, ap as SystemMessageMetadata, aq as TypingIndicatorEvent, ar as UploadConfig, as as UploadProgress, at as UserStatusEvent, au as resolveConfig, av as storageApi, aw as uploadBatch } from './storage-DlxfLVqx.cjs';
 import { AxiosInstance } from 'axios';
 import { Socket } from 'socket.io-client';
 import * as zustand_middleware from 'zustand/middleware';
@@ -325,6 +325,8 @@ type TokenStore = {
     setTokens: (tokens: AuthTokens) => void;
     clearTokens: () => void;
 };
+declare function setAuthReadyPromise(promise: Promise<unknown> | null): void;
+declare function isApiClientConfigured(): boolean;
 declare function initApiClient(config: ResolvedConfig, tokenStore: TokenStore): AxiosInstance;
 declare function setApiClientInstance(instance: AxiosInstance): void;
 declare function getApiClient(): AxiosInstance;
@@ -337,6 +339,10 @@ declare function getSocket(): Socket;
 declare function tryGetSocket(): Socket | null;
 declare function getSocketStatus(): SocketStatus;
 declare function onSocketStatus(listener: StatusListener): () => void;
+/** Drop all tracked rooms. Call on a genuine identity change (user/tenant
+ *  switch) so the reconnect re-flush can't re-join the previous user's rooms.
+ *  NOT called from disconnectSocket() — a token refresh is not an intent change. */
+declare function resetTrackedRooms(): void;
 declare function connectSocket(config: ResolvedConfig, getToken: () => string | null | undefined): Promise<Socket>;
 declare function disconnectSocket(): void;
 declare function reconnectSocket(token: string, userId?: string, tenantId?: string): void;
@@ -389,17 +395,66 @@ declare function encryptPayload(data: unknown, sessionKey: AnySessionKey): Promi
 declare function decryptPayload(envelope: TransitEnvelope, sessionKey: AnySessionKey): Promise<unknown>;
 declare function isTransitEnvelope(v: unknown): v is TransitEnvelope;
 
+/**
+ * Caller identity attached to the pre-auth transit handshake requests.
+ *
+ * GET /crypto/pubkey and POST /crypto/session run BEFORE a transit session (and
+ * therefore before the authenticated axios client) exists, so they bypass the
+ * request interceptor that normally adds these headers. Without them the server
+ * can only rate-limit these two routes by client IP — which means every user
+ * behind one NAT, office proxy or ALB shares a single bucket, and one client's
+ * reload loop 429s everyone else.
+ *
+ * These values are NOT used for authentication: the endpoints are unauthenticated
+ * by design and the server treats the headers as a fairness hint only, with a
+ * per-IP ceiling underneath as the real abuse limit. Sending them is therefore
+ * safe, optional, and backward compatible — an older SDK that omits them simply
+ * falls back to the shared per-IP bucket.
+ */
+interface TransitIdentity {
+    /** External user id — same value sent as x-user-id on authenticated requests. */
+    userId?: string;
+    /** Tenant id — same value sent as X-Tenant-ID on authenticated requests. */
+    tenantId?: string;
+}
+/**
+ * How long the server asked us to wait, in ms, from a 429's Retry-After.
+ *
+ * The chat server runs TWO named rate-limit layers, and @nestjs/throttler
+ * suffixes its headers with the throttler name unless that name is literally
+ * "default". So a 429 carries `Retry-After-identity` or `Retry-After-ip`, not a
+ * bare `Retry-After`. Older servers and intermediary proxies may still send the
+ * bare name, so all three are read; when more than one is present the LONGER
+ * wait wins, since retrying before the slower bucket drains just earns another
+ * 429.
+ *
+ * Returns undefined when no variant is readable — in a browser that also
+ * happens when the server omits these from Access-Control-Expose-Headers, in
+ * which case callers must fall back to their own backoff.
+ */
+declare function readRetryAfterMs(headers: Headers): number | undefined;
+/**
+ * Thrown when the transit handshake is rate-limited (HTTP 429).
+ *
+ * Distinct from a generic failure because the correct response differs: a 429
+ * means "wait", not "this is broken", so callers must not burn their retry
+ * budget on it and should honour `retryAfterMs` when the server supplied it.
+ */
+declare class TransitRateLimitedError extends Error {
+    readonly retryAfterMs?: number;
+    constructor(retryAfterMs?: number);
+}
 interface ServerPublicKeys {
     x25519: string;
     p256: string;
     enabled: boolean;
 }
-declare function fetchServerKeys(apiUrl: string): Promise<ServerPublicKeys>;
+declare function fetchServerKeys(apiUrl: string, identity?: TransitIdentity): Promise<ServerPublicKeys>;
 declare function generateEphemeralKey(algo: TransitAlgo, serverKeys: ServerPublicKeys): Promise<{
     ephemeralPubB64: string;
     deriveSessionKey: (sessionId: string) => Promise<unknown>;
 }>;
-declare function createRestTransitSession(apiUrl: string): Promise<{
+declare function createRestTransitSession(apiUrl: string, identity?: TransitIdentity): Promise<{
     sessionId: string;
     sessionKey: CryptoKey | Uint8Array;
 } | null>;
@@ -793,4 +848,4 @@ declare class AntzChatClient {
     uploadIcon(conversationId: string, file: UploadableFile): Promise<Conversation>;
 }
 
-export { AntzChatAuthError, AntzChatClient, AntzChatConfig, AntzChatError, AntzChatNetworkError, AntzChatPermissionError, AntzChatServerError, AntzChatValidationError, AppConfig, AuthResponse, AuthTokens, BatchUploadResult, CompletedPart, Conversation, ConversationListParams, ConversationSyncResponse, ConversationUnreadCount, type CreateDirectData, type CreateGroupData, CrossConversationSyncResponse, CursorPaginatedResponse, FileResponse, FileType, ForwardAckPayload, ForwardMessagePayload, type ForwardResult, HIGHLY_FORWARDED_DEPTH_THRESHOLD, type LastReadEntry, type ListMessagesParams, LoginCredentials, MAX_FORWARD_TARGETS, type MentionPart, type MentionSegment, Message, MessageReactionsResponse, MessageReceiptsResponse, type MobileDeviceToken, PaginatedResponse, type ParsedMention, Participant, PersistStorage, PresignedUrlRequest, PresignedUrlResponse, RegisterData, type RegisterDeviceTokenPayload, ResolvedCompressionConfig, ResolvedConfig, type SearchParams, type SendData, SendMessagePayload, type SocketStatus, type StatusListener, type TokenStore, UnreadSummary, type UpdateConversationData, type UpdateProfilePayload, UploadableFile, User, UserPreferences, type WebPushDeviceToken, appConfigApi, authApi, buildMentionText, connectSocket, conversationsApi, createAuthStore, createRestTransitSession, decryptPayload, devicesApi, disconnectSocket, encryptPayload, extractMentionIds, fetchServerKeys, generateEphemeralKey, getApiClient, getAuthStore, getCompressionStrategy, getSessionId, getSessionKey, getSocket, getSocketStatus, initApiClient, initAuthStore, isMentionAll, isTransitEnvelope, messagesApi, normalizeAxiosError, normalizeConversation, onSocketStatus, parseMentions, performHandshake, reconnectSocket, refreshSocketAuth, renderMentionParts, resetAuthStore, resolveSystemMessageText, setApiClientInstance, setTransitSession, socketEmit, syncApi, tryGetSocket, useChatStore, usersApi };
+export { AntzChatAuthError, AntzChatClient, AntzChatConfig, AntzChatError, AntzChatNetworkError, AntzChatPermissionError, AntzChatServerError, AntzChatValidationError, AppConfig, AuthResponse, AuthTokens, BatchUploadResult, CompletedPart, Conversation, ConversationListParams, ConversationSyncResponse, ConversationUnreadCount, type CreateDirectData, type CreateGroupData, CrossConversationSyncResponse, CursorPaginatedResponse, FileResponse, FileType, ForwardAckPayload, ForwardMessagePayload, type ForwardResult, HIGHLY_FORWARDED_DEPTH_THRESHOLD, type LastReadEntry, type ListMessagesParams, LoginCredentials, MAX_FORWARD_TARGETS, type MentionPart, type MentionSegment, Message, MessageReactionsResponse, MessageReceiptsResponse, type MobileDeviceToken, PaginatedResponse, type ParsedMention, Participant, PersistStorage, PresignedUrlRequest, PresignedUrlResponse, RegisterData, type RegisterDeviceTokenPayload, ResolvedCompressionConfig, ResolvedConfig, type SearchParams, type SendData, SendMessagePayload, type SocketStatus, type StatusListener, type TokenStore, type TransitIdentity, TransitRateLimitedError, UnreadSummary, type UpdateConversationData, type UpdateProfilePayload, UploadableFile, User, UserPreferences, type WebPushDeviceToken, appConfigApi, authApi, buildMentionText, connectSocket, conversationsApi, createAuthStore, createRestTransitSession, decryptPayload, devicesApi, disconnectSocket, encryptPayload, extractMentionIds, fetchServerKeys, generateEphemeralKey, getApiClient, getAuthStore, getCompressionStrategy, getSessionId, getSessionKey, getSocket, getSocketStatus, initApiClient, initAuthStore, isApiClientConfigured, isMentionAll, isTransitEnvelope, messagesApi, normalizeAxiosError, normalizeConversation, onSocketStatus, parseMentions, performHandshake, readRetryAfterMs, reconnectSocket, refreshSocketAuth, renderMentionParts, resetAuthStore, resetTrackedRooms, resolveSystemMessageText, setApiClientInstance, setAuthReadyPromise, setTransitSession, socketEmit, syncApi, tryGetSocket, useChatStore, usersApi };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { R as ResolvedCompressionConfig, L as LoginCredentials, A as AuthResponse, a as RegisterData, b as AuthTokens, U as User, C as CrossConversationSyncResponse, c as ConversationSyncResponse, d as AppConfig, S as SendMessagePayload, M as Message, e as CursorPaginatedResponse, f as MessageReactionsResponse, P as PaginatedResponse, g as MessageReceiptsResponse, h as ConversationListParams, i as Conversation, j as Participant, k as ConversationUnreadCount, l as UnreadSummary, m as UserPreferences, n as ResolvedConfig, F as ForwardMessagePayload, o as ForwardAckPayload, p as PersistStorage, q as PresignedUrlRequest, r as PresignedUrlResponse, s as FileResponse, t as CompletedPart, u as FileType, v as AntzChatConfig, w as UploadableFile, B as BatchUploadResult } from './storage-C8V7aVum.js';
-export { x as Attachment, y as CompressedFile, z as CompressionAlgorithm, D as CompressionConfig, E as ConversationType, G as ConversationUpdatedEvent, H as FileSizeLimits, I as ForwardResultPayload, J as LastReaction, K as MENTION_ALL_ID, N as MessageAckEvent, O as MessageContent, Q as MessageDeletedEvent, T as MessageDeletedForMeEvent, V as MessageDeliveredEvent, W as MessageForwardReference, X as MessageMetadata, Y as MessageReaction, Z as MessageReceiptEntry, _ as MessageReplyReference, $ as MessageStarUpdatedEvent, a0 as MessageUpdatedEvent, a1 as MessagesDeliveredEvent, a2 as MultipartPartUrl, a3 as MultipartUploadInfo, a4 as NewMessageEvent, a5 as OptimisticAttachment, a6 as PlatformCompressFn, a7 as PlatformUploadFn, a8 as PlatformUploadPartFn, a9 as QuietHours, aa as ReactionGroup, ab as ReactionUpdatedEvent, ac as ReactionUser, ad as ReadReceiptEvent, ae as ReplyAttachmentSnapshot, af as ResolvedFileSizeLimits, ag as SendMessageAttachment, ah as SyncDeletedForMe, ai as SyncDeliveredReceipt, aj as SyncParticipantChange, ak as SyncReactionEntry, al as SyncReactions, am as SyncReadReceipt, an as SyncStarEntry, ao as SystemMessageMetadata, ap as TypingIndicatorEvent, aq as UploadConfig, ar as UploadProgress, as as UserStatusEvent, at as resolveConfig, au as storageApi, av as uploadBatch } from './storage-C8V7aVum.js';
+import { R as ResolvedCompressionConfig, L as LoginCredentials, A as AuthResponse, a as RegisterData, b as AuthTokens, U as User, C as CrossConversationSyncResponse, c as ConversationSyncResponse, d as AppConfig, S as SendMessagePayload, M as Message, e as CursorPaginatedResponse, f as MessageReactionsResponse, P as PaginatedResponse, g as MessageReceiptsResponse, h as ConversationListParams, i as Conversation, j as Participant, k as ConversationUnreadCount, l as UnreadSummary, m as UserPreferences, n as ResolvedConfig, F as ForwardMessagePayload, o as ForwardAckPayload, p as PersistStorage, q as PresignedUrlRequest, r as PresignedUrlResponse, s as FileResponse, t as CompletedPart, u as FileType, v as AntzChatConfig, w as UploadableFile, B as BatchUploadResult } from './storage-DlxfLVqx.js';
+export { x as Attachment, y as CompressedFile, z as CompressionAlgorithm, D as CompressionConfig, E as ConversationType, G as ConversationUpdatedEvent, H as FileSizeLimits, I as ForwardResultPayload, J as LastReaction, K as MENTION_ALL_ID, N as MessageAckEvent, O as MessageContent, Q as MessageDeletedEvent, T as MessageDeletedForMeEvent, V as MessageDeliveredEvent, W as MessageForwardReference, X as MessageMetadata, Y as MessageReaction, Z as MessageReceiptEntry, _ as MessageReplyReference, $ as MessageStarUpdatedEvent, a0 as MessageUpdatedEvent, a1 as MessagesDeliveredEvent, a2 as MultipartPartUrl, a3 as MultipartUploadInfo, a4 as NewMessageEvent, a5 as OptimisticAttachment, a6 as PlatformCompressFn, a7 as PlatformUploadFn, a8 as PlatformUploadPartFn, a9 as QuietHours, aa as ReactionGroup, ab as ReactionUpdatedEvent, ac as ReactionUser, ad as ReadReceiptEvent, ae as ReplyAttachmentSnapshot, af as ResolvedFileSizeLimits, ag as SendErrorContext, ah as SendMessageAttachment, ai as SyncDeletedForMe, aj as SyncDeliveredReceipt, ak as SyncParticipantChange, al as SyncReactionEntry, am as SyncReactions, an as SyncReadReceipt, ao as SyncStarEntry, ap as SystemMessageMetadata, aq as TypingIndicatorEvent, ar as UploadConfig, as as UploadProgress, at as UserStatusEvent, au as resolveConfig, av as storageApi, aw as uploadBatch } from './storage-DlxfLVqx.js';
 import { AxiosInstance } from 'axios';
 import { Socket } from 'socket.io-client';
 import * as zustand_middleware from 'zustand/middleware';
@@ -325,6 +325,8 @@ type TokenStore = {
     setTokens: (tokens: AuthTokens) => void;
     clearTokens: () => void;
 };
+declare function setAuthReadyPromise(promise: Promise<unknown> | null): void;
+declare function isApiClientConfigured(): boolean;
 declare function initApiClient(config: ResolvedConfig, tokenStore: TokenStore): AxiosInstance;
 declare function setApiClientInstance(instance: AxiosInstance): void;
 declare function getApiClient(): AxiosInstance;
@@ -337,6 +339,10 @@ declare function getSocket(): Socket;
 declare function tryGetSocket(): Socket | null;
 declare function getSocketStatus(): SocketStatus;
 declare function onSocketStatus(listener: StatusListener): () => void;
+/** Drop all tracked rooms. Call on a genuine identity change (user/tenant
+ *  switch) so the reconnect re-flush can't re-join the previous user's rooms.
+ *  NOT called from disconnectSocket() — a token refresh is not an intent change. */
+declare function resetTrackedRooms(): void;
 declare function connectSocket(config: ResolvedConfig, getToken: () => string | null | undefined): Promise<Socket>;
 declare function disconnectSocket(): void;
 declare function reconnectSocket(token: string, userId?: string, tenantId?: string): void;
@@ -389,17 +395,66 @@ declare function encryptPayload(data: unknown, sessionKey: AnySessionKey): Promi
 declare function decryptPayload(envelope: TransitEnvelope, sessionKey: AnySessionKey): Promise<unknown>;
 declare function isTransitEnvelope(v: unknown): v is TransitEnvelope;
 
+/**
+ * Caller identity attached to the pre-auth transit handshake requests.
+ *
+ * GET /crypto/pubkey and POST /crypto/session run BEFORE a transit session (and
+ * therefore before the authenticated axios client) exists, so they bypass the
+ * request interceptor that normally adds these headers. Without them the server
+ * can only rate-limit these two routes by client IP — which means every user
+ * behind one NAT, office proxy or ALB shares a single bucket, and one client's
+ * reload loop 429s everyone else.
+ *
+ * These values are NOT used for authentication: the endpoints are unauthenticated
+ * by design and the server treats the headers as a fairness hint only, with a
+ * per-IP ceiling underneath as the real abuse limit. Sending them is therefore
+ * safe, optional, and backward compatible — an older SDK that omits them simply
+ * falls back to the shared per-IP bucket.
+ */
+interface TransitIdentity {
+    /** External user id — same value sent as x-user-id on authenticated requests. */
+    userId?: string;
+    /** Tenant id — same value sent as X-Tenant-ID on authenticated requests. */
+    tenantId?: string;
+}
+/**
+ * How long the server asked us to wait, in ms, from a 429's Retry-After.
+ *
+ * The chat server runs TWO named rate-limit layers, and @nestjs/throttler
+ * suffixes its headers with the throttler name unless that name is literally
+ * "default". So a 429 carries `Retry-After-identity` or `Retry-After-ip`, not a
+ * bare `Retry-After`. Older servers and intermediary proxies may still send the
+ * bare name, so all three are read; when more than one is present the LONGER
+ * wait wins, since retrying before the slower bucket drains just earns another
+ * 429.
+ *
+ * Returns undefined when no variant is readable — in a browser that also
+ * happens when the server omits these from Access-Control-Expose-Headers, in
+ * which case callers must fall back to their own backoff.
+ */
+declare function readRetryAfterMs(headers: Headers): number | undefined;
+/**
+ * Thrown when the transit handshake is rate-limited (HTTP 429).
+ *
+ * Distinct from a generic failure because the correct response differs: a 429
+ * means "wait", not "this is broken", so callers must not burn their retry
+ * budget on it and should honour `retryAfterMs` when the server supplied it.
+ */
+declare class TransitRateLimitedError extends Error {
+    readonly retryAfterMs?: number;
+    constructor(retryAfterMs?: number);
+}
 interface ServerPublicKeys {
     x25519: string;
     p256: string;
     enabled: boolean;
 }
-declare function fetchServerKeys(apiUrl: string): Promise<ServerPublicKeys>;
+declare function fetchServerKeys(apiUrl: string, identity?: TransitIdentity): Promise<ServerPublicKeys>;
 declare function generateEphemeralKey(algo: TransitAlgo, serverKeys: ServerPublicKeys): Promise<{
     ephemeralPubB64: string;
     deriveSessionKey: (sessionId: string) => Promise<unknown>;
 }>;
-declare function createRestTransitSession(apiUrl: string): Promise<{
+declare function createRestTransitSession(apiUrl: string, identity?: TransitIdentity): Promise<{
     sessionId: string;
     sessionKey: CryptoKey | Uint8Array;
 } | null>;
@@ -793,4 +848,4 @@ declare class AntzChatClient {
     uploadIcon(conversationId: string, file: UploadableFile): Promise<Conversation>;
 }
 
-export { AntzChatAuthError, AntzChatClient, AntzChatConfig, AntzChatError, AntzChatNetworkError, AntzChatPermissionError, AntzChatServerError, AntzChatValidationError, AppConfig, AuthResponse, AuthTokens, BatchUploadResult, CompletedPart, Conversation, ConversationListParams, ConversationSyncResponse, ConversationUnreadCount, type CreateDirectData, type CreateGroupData, CrossConversationSyncResponse, CursorPaginatedResponse, FileResponse, FileType, ForwardAckPayload, ForwardMessagePayload, type ForwardResult, HIGHLY_FORWARDED_DEPTH_THRESHOLD, type LastReadEntry, type ListMessagesParams, LoginCredentials, MAX_FORWARD_TARGETS, type MentionPart, type MentionSegment, Message, MessageReactionsResponse, MessageReceiptsResponse, type MobileDeviceToken, PaginatedResponse, type ParsedMention, Participant, PersistStorage, PresignedUrlRequest, PresignedUrlResponse, RegisterData, type RegisterDeviceTokenPayload, ResolvedCompressionConfig, ResolvedConfig, type SearchParams, type SendData, SendMessagePayload, type SocketStatus, type StatusListener, type TokenStore, UnreadSummary, type UpdateConversationData, type UpdateProfilePayload, UploadableFile, User, UserPreferences, type WebPushDeviceToken, appConfigApi, authApi, buildMentionText, connectSocket, conversationsApi, createAuthStore, createRestTransitSession, decryptPayload, devicesApi, disconnectSocket, encryptPayload, extractMentionIds, fetchServerKeys, generateEphemeralKey, getApiClient, getAuthStore, getCompressionStrategy, getSessionId, getSessionKey, getSocket, getSocketStatus, initApiClient, initAuthStore, isMentionAll, isTransitEnvelope, messagesApi, normalizeAxiosError, normalizeConversation, onSocketStatus, parseMentions, performHandshake, reconnectSocket, refreshSocketAuth, renderMentionParts, resetAuthStore, resolveSystemMessageText, setApiClientInstance, setTransitSession, socketEmit, syncApi, tryGetSocket, useChatStore, usersApi };
+export { AntzChatAuthError, AntzChatClient, AntzChatConfig, AntzChatError, AntzChatNetworkError, AntzChatPermissionError, AntzChatServerError, AntzChatValidationError, AppConfig, AuthResponse, AuthTokens, BatchUploadResult, CompletedPart, Conversation, ConversationListParams, ConversationSyncResponse, ConversationUnreadCount, type CreateDirectData, type CreateGroupData, CrossConversationSyncResponse, CursorPaginatedResponse, FileResponse, FileType, ForwardAckPayload, ForwardMessagePayload, type ForwardResult, HIGHLY_FORWARDED_DEPTH_THRESHOLD, type LastReadEntry, type ListMessagesParams, LoginCredentials, MAX_FORWARD_TARGETS, type MentionPart, type MentionSegment, Message, MessageReactionsResponse, MessageReceiptsResponse, type MobileDeviceToken, PaginatedResponse, type ParsedMention, Participant, PersistStorage, PresignedUrlRequest, PresignedUrlResponse, RegisterData, type RegisterDeviceTokenPayload, ResolvedCompressionConfig, ResolvedConfig, type SearchParams, type SendData, SendMessagePayload, type SocketStatus, type StatusListener, type TokenStore, type TransitIdentity, TransitRateLimitedError, UnreadSummary, type UpdateConversationData, type UpdateProfilePayload, UploadableFile, User, UserPreferences, type WebPushDeviceToken, appConfigApi, authApi, buildMentionText, connectSocket, conversationsApi, createAuthStore, createRestTransitSession, decryptPayload, devicesApi, disconnectSocket, encryptPayload, extractMentionIds, fetchServerKeys, generateEphemeralKey, getApiClient, getAuthStore, getCompressionStrategy, getSessionId, getSessionKey, getSocket, getSocketStatus, initApiClient, initAuthStore, isApiClientConfigured, isMentionAll, isTransitEnvelope, messagesApi, normalizeAxiosError, normalizeConversation, onSocketStatus, parseMentions, performHandshake, readRetryAfterMs, reconnectSocket, refreshSocketAuth, renderMentionParts, resetAuthStore, resetTrackedRooms, resolveSystemMessageText, setApiClientInstance, setAuthReadyPromise, setTransitSession, socketEmit, syncApi, tryGetSocket, useChatStore, usersApi };

package/dist/index.js

@@ -5,12 +5,15 @@ import {
   AntzChatPermissionError,
   AntzChatServerError,
   AntzChatValidationError,
+  TransitRateLimitedError,
+  awaitTransitReadyOr,
   clearTransitSession,
-  configureTransit,
+  configureTransitIfUnset,
   createRestTransitSession,
   decryptPayload,
   detectTransitAlgo,
   encryptPayload,
+  ensureRestTransitHandshake,
   fetchServerKeys,
   generateEphemeralKey,
   generateUUID,
@@ -21,16 +24,21 @@ import {
   getTransitHandshakePromise,
   getTransitSession,
   initApiClient,
+  isApiClientConfigured,
   isTransitEnabled,
   isTransitEnvelope,
+  isTransitRequired,
   normalizeAxiosError,
+  onTransitReady,
   performHandshake,
+  readRetryAfterMs,
   resetAlgoCache,
   setApiClientInstance,
+  setAuthReadyPromise,
   setTransitSession,
   storageApi,
   uploadBatch
-} from "./chunk-XTQYF5HU.js";
+} from "./chunk-U637W5MD.js";
 import {
   useChatStore
 } from "./chunk-UIYJAOGL.js";
@@ -89,6 +97,7 @@ function resolveConfig(config) {
       compressDocuments: config.compression?.compressDocuments ?? true
     },
     persistStorage: config.persistStorage,
+    onSendError: config.onSendError,
     messagePageSize: config.messagePageSize ?? 40,
     starredMessagePageSize: config.starredMessagePageSize ?? 30,
     searchPageSize: config.searchPageSize ?? 50
@@ -311,7 +320,6 @@ var _getToken = null;
 var _userId;
 var _tenantId;
 var _config = null;
-var _preservingSession = false;
 function setStatus(s) {
   _status = s;
   _statusListeners.forEach((l) => l(s));
@@ -330,29 +338,48 @@ function onSocketStatus(listener) {
   _statusListeners.add(listener);
   return () => _statusListeners.delete(listener);
 }
-async function secureEmit(socket, event, payload, ack) {
-  if (isTransitEnabled()) {
-    const key = getSessionKey();
-    if (key) {
-      const envelope = await encryptPayload(payload, key);
-      if (ack) {
-        socket.emit(event, envelope, async (encryptedResponse) => {
-          if (isTransitEnvelope(encryptedResponse)) {
-            try {
-              const decrypted = await decryptPayload(encryptedResponse, key);
-              ack(decrypted);
-            } catch {
-              ack(encryptedResponse);
-            }
-          } else {
-            ack(encryptedResponse);
-          }
-        });
+var SECURE_EMIT_WAIT_MS = 4e3;
+function emitEncrypted(socket, event, envelope, key, ack) {
+  if (ack) {
+    socket.emit(event, envelope, async (encryptedResponse) => {
+      if (isTransitEnvelope(encryptedResponse)) {
+        try {
+          ack(await decryptPayload(encryptedResponse, key));
+        } catch {
+          ack(encryptedResponse);
+        }
       } else {
-        socket.emit(event, envelope);
+        ack(encryptedResponse);
       }
+    });
+  } else {
+    socket.emit(event, envelope);
+  }
+}
+async function secureEmit(socket, event, payload, ack) {
+  let key = getSessionKey();
+  if (key && isTransitEnabled()) {
+    emitEncrypted(socket, event, await encryptPayload(payload, key), key, ack);
+    return;
+  }
+  if (isTransitRequired()) {
+    try {
+      ensureRestTransitHandshake();
+    } catch {
+    }
+    const ok = await awaitTransitReadyOr(SECURE_EMIT_WAIT_MS);
+    key = getSessionKey();
+    if (ok && key && isTransitEnabled()) {
+      emitEncrypted(socket, event, await encryptPayload(payload, key), key, ack);
       return;
     }
+    if (isTransitRequired()) {
+      throw new AntzChatNetworkError(
+        `Transit encryption required but no session established \u2014 "${event}" not sent`,
+        "TRANSIT_NOT_READY",
+        { event }
+      );
+    }
   }
   if (ack) {
     socket.emit(event, payload, ack);
@@ -378,6 +405,28 @@ function secureOn(socket, event, handler) {
     handler(raw);
   });
 }
+var _joinedRooms = /* @__PURE__ */ new Set();
+function trackRoomJoin(conversationId) {
+  _joinedRooms.add(conversationId);
+}
+function trackRoomLeave(conversationId) {
+  _joinedRooms.delete(conversationId);
+}
+function resetTrackedRooms() {
+  _joinedRooms.clear();
+}
+function flushJoinedRooms() {
+  const socket = tryGetSocket();
+  if (!socket || _joinedRooms.size === 0) return;
+  for (const conversationId of _joinedRooms) {
+    void secureEmit(socket, "join_room", { conversationId }).catch(() => {
+    });
+  }
+}
+onTransitReady(flushJoinedRooms);
+onSocketStatus((status) => {
+  if (status === "connected") flushJoinedRooms();
+});
 async function connectSocket(config, getToken) {
   if (_socket && !_socket.disconnected) return _socket;
   if (_connectingPromise) return _connectingPromise;
@@ -399,6 +448,7 @@ async function _doConnect(config, getToken) {
     ...config.avatar?.url && { avatarUrl: config.avatar.url },
     ...config.avatar?.base64 && { avatarBase64: config.avatar.base64 }
   };
+  configureTransitIfUnset(config.transitEncryption);
   let boundDeriveSessionKey = null;
   if (config.transitEncryption) {
     const inFlight = getTransitHandshakePromise();
@@ -408,7 +458,7 @@ async function _doConnect(config, getToken) {
     if (existingSession?.enabled && existingSession.sessionId) {
       httpsSession = { sessionId: existingSession.sessionId, sessionKey: existingSession.sessionKey };
     } else {
-      httpsSession = await createRestTransitSession(config.apiUrl);
+      httpsSession = await createRestTransitSession(config.apiUrl, { userId: config.userId, tenantId: config.tenantId });
       if (httpsSession) {
         const algo = globalThis.crypto?.subtle ? await detectTransitAlgo() : "x25519";
         setTransitSession({ sessionKey: httpsSession.sessionKey, algo, sessionId: httpsSession.sessionId, enabled: true });
@@ -419,7 +469,7 @@ async function _doConnect(config, getToken) {
       boundDeriveSessionKey = null;
     } else {
       try {
-        const serverKeys = await fetchServerKeys(config.apiUrl);
+        const serverKeys = await fetchServerKeys(config.apiUrl, { userId: config.userId, tenantId: config.tenantId });
         if (!serverKeys.enabled) {
           throw new AntzChatError(
             "TRANSIT_MISMATCH",
@@ -436,7 +486,7 @@ async function _doConnect(config, getToken) {
     }
   } else {
     try {
-      const serverKeys = await fetchServerKeys(config.apiUrl);
+      const serverKeys = await fetchServerKeys(config.apiUrl, { userId: config.userId, tenantId: config.tenantId });
       if (serverKeys.enabled) {
         throw new AntzChatError(
           "TRANSIT_MISMATCH",
@@ -463,7 +513,6 @@ async function _doConnect(config, getToken) {
   _socket.on("connect", () => setStatus("connected"));
   _socket.on("disconnect", () => {
     setStatus("disconnected");
-    if (!_preservingSession) clearTransitSession();
   });
   _socket.on("connect_error", (err) => {
     console.error("[AntzChat] Socket connect_error:", err?.message, err?.data);
@@ -478,8 +527,9 @@ async function _doConnect(config, getToken) {
         resolve();
       };
       const timeout = setTimeout(() => {
-        console.warn("[AntzChat] transit_session timeout \u2014 unblocking HTTP without transit encryption");
-        configureTransit(false);
+        console.error(
+          "[AntzChat] transit_session did not arrive within 5s. Transit stays REQUIRED \u2014 chat requests are gated (not downgraded to plaintext) until the handshake succeeds via REST retry or socket reconnect. Persistent failure = check POST /crypto/session (rate limit / 5xx) and the socket transit middleware."
+        );
         done();
       }, 5e3);
       _socket.on("transit_session", async ({ sessionId }) => {
@@ -566,13 +616,8 @@ function reconnectSocket(token, userId, tenantId) {
         ...tenantId && { tenantId },
         transitSessionId: existing.sessionId
       };
-      _preservingSession = true;
-      try {
-        if (_socket.connected) _socket.disconnect();
-        _socket.connect();
-      } finally {
-        _preservingSession = false;
-      }
+      if (_socket.connected) _socket.disconnect();
+      _socket.connect();
       return;
     }
     if (_getToken) {
@@ -617,7 +662,15 @@ async function drainSendQueue(conversationId) {
       entry.reject(new AntzChatNetworkError("Message dropped: queued too long", "MESSAGE_DROPPED"));
       continue;
     }
-    entry.run().then(entry.resolve).catch(entry.reject);
+    let acked;
+    try {
+      ({ acked } = await emitWithAck("send_message", entry.payload));
+    } catch (err) {
+      entry.reject(err);
+      while (queue.length > 0) queue.shift().reject(err);
+      break;
+    }
+    acked.then(entry.resolve).catch(entry.reject);
   }
   sendQueues.delete(conversationId);
   sendQueueRunning.delete(conversationId);
@@ -630,7 +683,7 @@ function queueSendMessage(payload) {
     return Promise.reject(new AntzChatNetworkError("Send queue full: too many messages in flight", "SEND_QUEUE_FULL", { conversationId }));
   }
   return new Promise((resolve, reject) => {
-    queue.push({ run: () => withAck("send_message", payload), resolve, reject, enqueuedAt: Date.now() });
+    queue.push({ payload, resolve, reject, enqueuedAt: Date.now() });
     drainSendQueue(conversationId);
   });
 }
@@ -653,33 +706,44 @@ function waitForReconnect() {
     });
   });
 }
-async function withAck(event, payload) {
+async function emitWithAck(event, payload) {
   let socket = tryGetSocket();
   if (!socket) {
     await waitForReconnect();
     socket = tryGetSocket();
   }
-  if (!socket) return Promise.reject(new AntzChatNetworkError(`Socket not connected (event: ${event})`, "SOCKET_NOT_CONNECTED", { event }));
-  return new Promise((resolve, reject) => {
-    let timer;
-    secureEmit(socket, event, payload, (response) => {
-      clearTimeout(timer);
-      resolve(response);
-    }).then(() => {
-      timer = setTimeout(() => reject(new AntzChatNetworkError(`Socket ack timeout: ${event}`, "SOCKET_TIMEOUT", { event })), ACK_TIMEOUT);
-    }).catch(reject);
+  if (!socket) throw new AntzChatNetworkError(`Socket not connected (event: ${event})`, "SOCKET_NOT_CONNECTED", { event });
+  let resolveAck;
+  let rejectAck;
+  const acked = new Promise((res, rej) => {
+    resolveAck = res;
+    rejectAck = rej;
   });
+  await secureEmit(socket, event, payload, (response) => resolveAck(response));
+  const timer = setTimeout(
+    () => rejectAck(new AntzChatNetworkError(`Socket ack timeout: ${event}`, "SOCKET_TIMEOUT", { event })),
+    ACK_TIMEOUT
+  );
+  void acked.then(() => clearTimeout(timer), () => clearTimeout(timer));
+  return { acked };
+}
+async function withAck(event, payload) {
+  const { acked } = await emitWithAck(event, payload);
+  return acked;
 }
 function fireAndForget(event, payload) {
   const socket = tryGetSocket();
   if (!socket) return;
-  secureEmit(socket, event, payload);
+  secureEmit(socket, event, payload).catch(() => {
+  });
 }
 var socketEmit = {
   joinRoom(conversationId) {
+    trackRoomJoin(conversationId);
     fireAndForget("join_room", { conversationId });
   },
   leaveRoom(conversationId) {
+    trackRoomLeave(conversationId);
     fireAndForget("leave_room", { conversationId });
   },
   sendMessage(payload) {
@@ -1269,6 +1333,7 @@ export {
   HIGHLY_FORWARDED_DEPTH_THRESHOLD,
   MAX_FORWARD_TARGETS,
   MENTION_ALL_ID,
+  TransitRateLimitedError,
   appConfigApi,
   authApi,
   buildMentionText,
@@ -1292,6 +1357,7 @@ export {
   getSocketStatus,
   initApiClient,
   initAuthStore,
+  isApiClientConfigured,
   isMentionAll,
   isTransitEnvelope,
   messagesApi,
@@ -1300,13 +1366,16 @@ export {
   onSocketStatus,
   parseMentions,
   performHandshake,
+  readRetryAfterMs,
   reconnectSocket,
   refreshSocketAuth,
   renderMentionParts,
   resetAuthStore,
+  resetTrackedRooms,
   resolveConfig,
   resolveSystemMessageText,
   setApiClientInstance,
+  setAuthReadyPromise,
   setTransitSession,
   socketEmit,
   storageApi,