@droponair/sdk-js 0.11.0 → 0.13.0

package/CHANGELOG.md

@@ -6,6 +6,36 @@ This project follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [0.13.0], 2026-05-21
+
+### Added
+
+- **Group read receipts.** When a group has `readReceiptsVisibleToGroup` enabled, a member's `markRead(messageId, groupId)` is fanned to every other member, not just the reader's own devices. The inbound `ReadReceiptEvent` now carries `fromUserId` so you know which member read the message. New `client.updateGroup(groupId, { name?, readReceiptsVisibleToGroup? })` controls the per-group flag (it is a group-level choice; off by default). Broadcasts stay own-device only by design.
+- **Attachment revoke.** New `client.revokeAttachment(attachmentId)` — the platform stops issuing download URLs for it and recipients with a live connection get an `ATTACHMENT_REVOKED` event via `onEvent` (metadata = attachmentId). Bytes already downloaded cannot be recalled.
+- **Attachment preview thumbnails.** `prepareAttachmentAndUpload` accepts an optional `thumbnail` (and `thumbnailMimeType`). Entirely optional — if provided, the SDK uploads it as a separate attachment encrypted the same way and links it via `AttachmentRef.thumbnailAttachmentId`; download it like any attachment. If omitted, there is simply no thumbnail.
+
+### Notes
+
+- Download authorization for GROUP attachments is now checked against *current* group membership: a user removed from a group can no longer download its attachments even if they were a recipient at upload time.
+- No PROTOCOL_VERSION change — additive proto fields (`SyncFrame.fromUserId`, `AttachmentRef.thumbnailAttachmentId`) and an additive event type.
+
+---
+
+## [0.12.0], 2026-05-20
+
+### Added
+
+- **Notification clear sync.** `client.clearNotification(conversationId)` tells the user's other devices a conversation's notifications were dismissed; `client.onNotificationCleared(cb)` listens for it. Always available (no opt-out) — it is plain own-device hygiene.
+- **Draft sync.** `client.syncDraft(conversationId, draftText)` pushes a conversation draft to the user's other devices; `client.onDraftSync(cb)` listens for it. **Opt-in:** the app owner enables it in the dashboard, and the draft text crosses the relay in cleartext (fanned out, never stored). When disabled the server drops the frame.
+- New exported types: `NotificationClearEvent` / `NotificationClearCallback`, `DraftSyncEvent` / `DraftSyncCallback`.
+
+### Notes
+
+- Both ride the existing `SyncFrame` wire type (own-device fan-out only, never delivered to a different user). No PROTOCOL_VERSION change.
+- Your app decides when to call `clearNotification()` / `syncDraft()` — the platform never infers dismissal or tracks drafts.
+
+---
+
 ## [0.11.0], 2026-05-20
 
 ### Added

package/README.md

@@ -102,6 +102,10 @@ const client = await initialize(options);
 | `revokeMyDevice(deviceId)` | `Promise<DeviceInfo>` | Revoke one of the current user's devices. Permanent. |
 | `markRead(messageId, conversationId?)` | `void` | Mark a message as read; relays a receipt to the user's other devices. |
 | `onReadReceipt(callback)` | `() => void` | Listen for read receipts from the user's other devices. |
+| `clearNotification(conversationId)` | `void` | Tell the user's other devices a conversation's notifications were dismissed. |
+| `onNotificationCleared(callback)` | `() => void` | Listen for notification-clear syncs from the user's other devices. |
+| `syncDraft(conversationId, draftText)` | `void` | Push a conversation draft to the user's other devices (opt-in, cleartext). |
+| `onDraftSync(callback)` | `() => void` | Listen for draft syncs from the user's other devices. |
 
 ### Cross-device read receipts
 
@@ -117,6 +121,18 @@ client.onReadReceipt(e => {
 });
 ```
 
+### Notification clear & draft sync
+
+Available since SDK `0.12.0`, both own-device only. `clearNotification()` tells your user's other devices a conversation's notifications were dismissed — always available. `syncDraft()` pushes a draft so the user can keep typing on another device — **opt-in** (the app owner enables it in the dashboard) and the draft text crosses the relay in cleartext.
+
+```typescript
+client.clearNotification(conversationId);
+client.onNotificationCleared(e => { /* clear badge for e.conversationId */ });
+
+client.syncDraft(conversationId, composerText);
+client.onDraftSync(e => { /* pre-fill composer with e.draftText */ });
+```
+
 ### Device trust
 
 Available since SDK `0.10.0`. Any device that completes a connection is implicitly trusted. `listMyDevices()` powers a "Your devices" screen; `revokeMyDevice()` cuts a device off immediately. When the *current* device is revoked, the SDK stops reconnecting and emits a `DEVICE_REVOKED` event via `onEvent` — listen for it to clear local key storage and prompt re-registration.
@@ -215,8 +231,12 @@ client.onMessage(async (msg) => {
 | `createUploadSession(options)` | `Promise<UploadSession>` | Low-level: presigned PUT URL only |
 | `finalizeAttachment(attachmentId, sha256)` | `Promise<void>` | Low-level: commit integrity hash |
 | `downloadAttachment(ref)` | `Promise<DownloadedAttachment>` | Get presigned URL + download + decrypt |
+| `revokeAttachment(attachmentId)` | `Promise<void>` | Revoke an attachment you sent; recipients get `ATTACHMENT_REVOKED` |
 | `sendMessage(toUserId, text, { attachments })` | `Promise<{ messageId }>` | Send with attachments |
 
+- **Preview thumbnails (optional).** Pass `thumbnail` (bytes) in `prepareAttachmentAndUpload` options and the SDK uploads it as a separate encrypted attachment, linked via `AttachmentRef.thumbnailAttachmentId`. Purely the developer's choice; omit it and there is no thumbnail. Download the thumbnail like any attachment.
+- **Revoke.** `revokeAttachment()` stops the platform issuing new download URLs and notifies recipients. Bytes a recipient already downloaded cannot be recalled. For GROUP attachments, download is authorized against *current* group membership, so a removed member loses access.
+
 - E2EE: a random AES-256-GCM file key encrypts the bytes; the file key is wrapped per recipient device using X25519 + HKDF (same model as message payloads). Server never sees the unwrapped file key.
 - Availability and per-file / per-month limits depend on your plan and are enforced server-side before the presigned URL is issued. See the [pricing page](https://www.droponair.com/pricing) and your dashboard Subscription page for what's enabled on your app.
 - Upload URL TTL = 15 min. Download URL TTL = 5 min. Download authorization checks that the requester is the original sender or in the captured recipient list.

package/dist/attachment/attachment-client.d.ts

@@ -43,6 +43,13 @@ export declare class AttachmentClient {
      * finalizes, and returns a fully-formed AttachmentRef for sendMessage.
      */
     prepareAttachmentAndUpload(input: Uint8Array, opts: PrepareAttachmentOptions): Promise<AttachmentRef>;
+    /**
+     * Revoke an attachment you sent (Phase 2f). After revoke the platform
+     * refuses to issue further download URLs and recipients with a live
+     * connection get an ATTACHMENT_REVOKED event. Bytes a recipient already
+     * downloaded cannot be recalled.
+     */
+    revokeAttachment(attachmentId: string): Promise<void>;
     getDownloadUrl(attachmentId: string): Promise<{
         url: string;
         method: string;

package/dist/attachment/attachment-client.js

@@ -78,6 +78,20 @@ class AttachmentClient {
         if (!input || input.length === 0) {
             throw new Error('attachment bytes are empty');
         }
+        // Optional preview thumbnail: the developer's choice. If supplied, upload
+        // it as an independent attachment (same conversation + recipients +
+        // encryption) and link it from the main ref. The recursive call passes
+        // thumbnail: undefined so it terminates.
+        let thumbnailAttachmentId;
+        if (opts.thumbnail && opts.thumbnail.length > 0) {
+            const thumbRef = await this.prepareAttachmentAndUpload(opts.thumbnail, {
+                ...opts,
+                thumbnail: undefined,
+                mimeType: opts.thumbnailMimeType ?? 'image/jpeg',
+                onUploadProgress: undefined,
+            });
+            thumbnailAttachmentId = thumbRef.attachmentId;
+        }
         const encryptionType = opts.encryptionType ?? 'E2EE';
         const conversationType = opts.groupId ? 'GROUP' : 'ONE_TO_ONE';
         if (conversationType === 'ONE_TO_ONE' && !opts.toUserId) {
@@ -129,8 +143,23 @@ class AttachmentClient {
             sha256,
             encryptionType,
             wrappedKeys,
+            thumbnailAttachmentId,
         };
     }
+    /**
+     * Revoke an attachment you sent (Phase 2f). After revoke the platform
+     * refuses to issue further download URLs and recipients with a live
+     * connection get an ATTACHMENT_REVOKED event. Bytes a recipient already
+     * downloaded cannot be recalled.
+     */
+    async revokeAttachment(attachmentId) {
+        const jwt = await this.deps.getValidDropOnAirJwt();
+        const resp = await this.deps.fetchFn(`${this.deps.httpUrl}/v1/attachments/${encodeURIComponent(attachmentId)}/revoke`, { method: 'POST', headers: { Authorization: `Bearer ${jwt}` } });
+        if (!resp.ok) {
+            const text = await resp.text().catch(() => '');
+            throw new Error(`Failed to revoke attachment (HTTP ${resp.status}): ${text}`);
+        }
+    }
     async getDownloadUrl(attachmentId) {
         const jwt = await this.deps.getValidDropOnAirJwt();
         const resp = await this.deps.fetchFn(`${this.deps.httpUrl}/v1/attachments/${encodeURIComponent(attachmentId)}/download-url`, {
@@ -204,6 +233,7 @@ class AttachmentClient {
                 senderPublicKey: wk.senderPublicKey,
                 nonce: wk.nonce,
             })),
+            thumbnailAttachmentId: ref.thumbnailAttachmentId ?? '',
         };
     }
     /** Convert a wire AttachmentRef (from a received message) into the public type. */
@@ -214,6 +244,7 @@ class AttachmentClient {
             mimeType: wire.mimeType,
             sizeBytes: Number(wire.sizeBytes),
             sha256: wire.sha256,
+            thumbnailAttachmentId: wire.thumbnailAttachmentId ? wire.thumbnailAttachmentId : undefined,
             encryptionType: wire.encryptionType === 1 ? 'CLEARTEXT' : 'E2EE',
             wrappedKeys: (wire.wrappedKeys ?? []).map((wk) => ({
                 deviceId: wk.deviceId,

package/dist/attachment/attachment-types.d.ts

@@ -27,6 +27,12 @@ export interface AttachmentRef {
     encryptionType: AttachmentEncryptionType;
     /** Empty for CLEARTEXT. One entry per recipient device for E2EE. */
     wrappedKeys: DeviceWrappedKey[];
+    /**
+     * Optional. The attachmentId of a separate attachment holding a preview
+     * thumbnail. Present only when the sender chose to attach one. Download it
+     * like any attachment via {@link DropOnAirClient.downloadAttachment}.
+     */
+    thumbnailAttachmentId?: string;
 }
 /** Optional metadata for {@link DropOnAirClient.createUploadSession}. */
 export interface CreateUploadSessionOptions {
@@ -66,6 +72,15 @@ export interface PrepareAttachmentOptions {
     mimeType?: string;
     /** Progress callback called with bytes uploaded so far. */
     onUploadProgress?: (bytesUploaded: number, totalBytes: number) => void;
+    /**
+     * Optional preview thumbnail bytes. Entirely the developer's choice - if
+     * provided, the SDK uploads it as a separate attachment (encrypted with the
+     * same scheme as the main file) and links it via thumbnailAttachmentId. If
+     * omitted, the AttachmentRef simply has no thumbnail.
+     */
+    thumbnail?: Uint8Array;
+    /** Mime type of the thumbnail bytes (defaults to 'image/jpeg'). */
+    thumbnailMimeType?: string;
 }
 /** Bytes payload returned by downloadAttachment. */
 export interface DownloadedAttachment {

package/dist/core/messaging-client.d.ts

@@ -1,6 +1,6 @@
 import { CryptoService } from '../crypto/crypto-service';
 import { SessionManager } from './session-manager';
-import { BroadcastCallback, CallEventCallback, DropOnAirClient, EventCallback, GroupCallEventCallback, GroupInfo, GroupMessageCallback, InitializeOptions, MessageCallback, MessageDeleteCallback, MessageEditCallback, TurnCredentials, DeviceInfo, ReadReceiptCallback } from './types';
+import { BroadcastCallback, CallEventCallback, DropOnAirClient, EventCallback, GroupCallEventCallback, GroupInfo, GroupMessageCallback, InitializeOptions, MessageCallback, MessageDeleteCallback, MessageEditCallback, TurnCredentials, DeviceInfo, ReadReceiptCallback, NotificationClearCallback, DraftSyncCallback } from './types';
 import { AttachmentRef, CreateUploadSessionOptions, DownloadedAttachment, PrepareAttachmentOptions, UploadSession } from '../attachment/attachment-types';
 export declare class MessagingClient implements DropOnAirClient {
     private readonly options;
@@ -72,6 +72,8 @@ export declare class MessagingClient implements DropOnAirClient {
     private readonly broadcastListeners;
     private readonly messageEditListeners;
     private readonly readReceiptListeners;
+    private readonly notificationClearListeners;
+    private readonly draftSyncListeners;
     private readonly messageDeleteListeners;
     /** ------------------------------------------------------------------
      * Lightweight structured logger. Only active when options.debug === true.
@@ -91,6 +93,7 @@ export declare class MessagingClient implements DropOnAirClient {
     createUploadSession(options: CreateUploadSessionOptions): Promise<UploadSession>;
     finalizeAttachment(attachmentId: string, sha256: string): Promise<void>;
     downloadAttachment(ref: AttachmentRef): Promise<DownloadedAttachment>;
+    revokeAttachment(attachmentId: string): Promise<void>;
     connect(): Promise<void>;
     disconnect(): void;
     sendMessage(toUserId: string, plaintextMessage: string, options?: {
@@ -178,6 +181,25 @@ export declare class MessagingClient implements DropOnAirClient {
      *                        other devices so they can bucket the receipt
      */
     markRead(messageId: string, conversationId?: string): void;
+    /**
+     * Tell this user's other devices that the notification(s) for a
+     * conversation have been dismissed - call this when YOUR app dismisses a
+     * notification or the user opens the conversation. The other devices clear
+     * the matching badge. The relay never decides what "dismissed" means.
+     */
+    clearNotification(conversationId: string): void;
+    /**
+     * Push the current draft text for a conversation to this user's other
+     * devices so the user can continue typing on another device. Draft sync is
+     * opt-in: the app owner must enable it in the dashboard, and the draft text
+     * crosses the relay in cleartext (it is fanned out, never stored). If the
+     * feature is disabled the server silently drops the frame.
+     */
+    syncDraft(conversationId: string, draftText: string): void;
+    /** Register a listener for notification-clear syncs from the user's other devices. */
+    onNotificationCleared(callback: NotificationClearCallback): () => void;
+    /** Register a listener for draft syncs from the user's other devices. */
+    onDraftSync(callback: DraftSyncCallback): () => void;
     private handleIncomingSync;
     sendCleartextMessage(toUserId: string, plaintext: string): Promise<{
         messageId: string;
@@ -192,6 +214,15 @@ export declare class MessagingClient implements DropOnAirClient {
     createGroup(name: string, memberUserIds?: string[]): Promise<GroupInfo>;
     listGroups(): Promise<GroupInfo[]>;
     getGroup(groupId: string): Promise<GroupInfo>;
+    /**
+     * Update a group. Any omitted field is left unchanged. `readReceiptsVisibleToGroup`
+     * (Phase 2e) controls whether members' group read receipts are visible to
+     * the whole group or stay own-device only.
+     */
+    updateGroup(groupId: string, update: {
+        name?: string;
+        readReceiptsVisibleToGroup?: boolean;
+    }): Promise<GroupInfo>;
     addGroupMembers(groupId: string, userIds: string[]): Promise<GroupInfo>;
     removeGroupMember(groupId: string, userId: string): Promise<GroupInfo>;
     deleteGroup(groupId: string): Promise<void>;

package/dist/core/messaging-client.js

@@ -221,6 +221,8 @@ class MessagingClient {
         this.broadcastListeners = new Set();
         this.messageEditListeners = new Set();
         this.readReceiptListeners = new Set();
+        this.notificationClearListeners = new Set();
+        this.draftSyncListeners = new Set();
         this.messageDeleteListeners = new Set();
         this.wsUrl = options.messagingWsUrl ?? 'wss://sdk.droponair.com/ws';
         this.httpUrl = options.messagingHttpUrl ?? 'https://sdk.droponair.com';
@@ -268,6 +270,9 @@ class MessagingClient {
     async downloadAttachment(ref) {
         return this.attachmentClient.downloadAttachment(ref);
     }
+    async revokeAttachment(attachmentId) {
+        return this.attachmentClient.revokeAttachment(attachmentId);
+    }
     async connect() {
         this.log('connect_start');
         this.shouldReconnect = true;
@@ -667,12 +672,61 @@ class MessagingClient {
         };
         this.ws.send(this.codec.encodeSyncFrame(frame));
     }
+    /**
+     * Tell this user's other devices that the notification(s) for a
+     * conversation have been dismissed - call this when YOUR app dismisses a
+     * notification or the user opens the conversation. The other devices clear
+     * the matching badge. The relay never decides what "dismissed" means.
+     */
+    clearNotification(conversationId) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+            throw new Error('DropOnAir websocket is not connected');
+        }
+        const frame = {
+            type: 'SYNC_CLEAR_NOTIFICATION',
+            messageId: '',
+            conversationId,
+            timestamp: Date.now(),
+        };
+        this.ws.send(this.codec.encodeSyncFrame(frame));
+    }
+    /**
+     * Push the current draft text for a conversation to this user's other
+     * devices so the user can continue typing on another device. Draft sync is
+     * opt-in: the app owner must enable it in the dashboard, and the draft text
+     * crosses the relay in cleartext (it is fanned out, never stored). If the
+     * feature is disabled the server silently drops the frame.
+     */
+    syncDraft(conversationId, draftText) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+            throw new Error('DropOnAir websocket is not connected');
+        }
+        const frame = {
+            type: 'SYNC_DRAFT',
+            messageId: '',
+            conversationId,
+            timestamp: Date.now(),
+            payload: draftText,
+        };
+        this.ws.send(this.codec.encodeSyncFrame(frame));
+    }
+    /** Register a listener for notification-clear syncs from the user's other devices. */
+    onNotificationCleared(callback) {
+        this.notificationClearListeners.add(callback);
+        return () => this.notificationClearListeners.delete(callback);
+    }
+    /** Register a listener for draft syncs from the user's other devices. */
+    onDraftSync(callback) {
+        this.draftSyncListeners.add(callback);
+        return () => this.draftSyncListeners.delete(callback);
+    }
     handleIncomingSync(frame) {
         if (frame.type === 'SYNC_READ_RECEIPT') {
             const event = {
                 messageId: frame.messageId,
                 conversationId: frame.conversationId || undefined,
                 timestamp: frame.timestamp,
+                fromUserId: frame.fromUserId || undefined,
             };
             for (const listener of this.readReceiptListeners) {
                 try {
@@ -681,6 +735,31 @@ class MessagingClient {
                 catch { /* listener errors must not break the socket */ }
             }
         }
+        else if (frame.type === 'SYNC_CLEAR_NOTIFICATION') {
+            const event = {
+                conversationId: frame.conversationId || '',
+                timestamp: frame.timestamp,
+            };
+            for (const listener of this.notificationClearListeners) {
+                try {
+                    listener(event);
+                }
+                catch { /* listener errors must not break the socket */ }
+            }
+        }
+        else if (frame.type === 'SYNC_DRAFT') {
+            const event = {
+                conversationId: frame.conversationId || '',
+                draftText: frame.payload || '',
+                timestamp: frame.timestamp,
+            };
+            for (const listener of this.draftSyncListeners) {
+                try {
+                    listener(event);
+                }
+                catch { /* listener errors must not break the socket */ }
+            }
+        }
     }
     // ---------------------------------------------------------------------------
     // Cleartext messaging (no E2EE key exchange required)
@@ -803,6 +882,22 @@ class MessagingClient {
             throw new Error(`getGroup failed (HTTP ${res.status})`);
         return res.json();
     }
+    /**
+     * Update a group. Any omitted field is left unchanged. `readReceiptsVisibleToGroup`
+     * (Phase 2e) controls whether members' group read receipts are visible to
+     * the whole group or stay own-device only.
+     */
+    async updateGroup(groupId, update) {
+        const jwt = await this.getValidDropOnAirJwt(false);
+        const res = await this.fetchFn(`${this.httpUrl}/api/groups/${encodeURIComponent(groupId)}`, {
+            method: 'PUT',
+            headers: { Authorization: `Bearer ${jwt}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify(update),
+        });
+        if (!res.ok)
+            throw new Error(`updateGroup failed (HTTP ${res.status})`);
+        return res.json();
+    }
     async addGroupMembers(groupId, userIds) {
         const jwt = await this.getValidDropOnAirJwt(false);
         const res = await this.fetchFn(`${this.httpUrl}/api/groups/${encodeURIComponent(groupId)}/members`, {

package/dist/core/types.d.ts

@@ -58,8 +58,34 @@ export interface ReadReceiptEvent {
     /** Optional peer userId / group id, echoed from markRead() for bucketing. */
     conversationId?: string;
     timestamp: number;
+    /**
+     * The user who read the message. Set when a group read receipt is fanned
+     * to other members (so you know WHICH member read it). Undefined / your own
+     * userId for plain own-device sync.
+     */
+    fromUserId?: string;
 }
 export type ReadReceiptCallback = (event: ReadReceiptEvent) => void;
+/**
+ * Delivered to the user's OTHER devices when one device calls
+ * clearNotification(). Use it to clear the conversation's notification badge.
+ */
+export interface NotificationClearEvent {
+    conversationId: string;
+    timestamp: number;
+}
+export type NotificationClearCallback = (event: NotificationClearEvent) => void;
+/**
+ * Delivered to the user's OTHER devices when one device calls syncDraft().
+ * Use it to pre-fill the message composer for that conversation. Draft sync
+ * is opt-in and the text crosses the relay in cleartext.
+ */
+export interface DraftSyncEvent {
+    conversationId: string;
+    draftText: string;
+    timestamp: number;
+}
+export type DraftSyncCallback = (event: DraftSyncEvent) => void;
 export interface BroadcastMessage {
     broadcastId: string;
     channelId: string;
@@ -90,6 +116,11 @@ export interface GroupInfo {
     createdBy: string;
     members: GroupMemberInfo[];
     createdAt: number;
+    /**
+     * Phase 2e. When true, a member's group read receipt is fanned to all other
+     * members; when false it stays own-device only. Controlled via updateGroup().
+     */
+    readReceiptsVisibleToGroup?: boolean;
 }
 export interface GroupMemberInfo {
     userId: string;
@@ -203,6 +234,20 @@ export interface DropOnAirClient {
     markRead(messageId: string, conversationId?: string): void;
     /** Register a listener for read receipts reported by this user's other devices. */
     onReadReceipt(callback: ReadReceiptCallback): () => void;
+    /**
+     * Tell the user's other devices a conversation's notifications were
+     * dismissed. The app decides what "dismissed" means.
+     */
+    clearNotification(conversationId: string): void;
+    /** Listen for notification-clear syncs from the user's other devices. */
+    onNotificationCleared(callback: NotificationClearCallback): () => void;
+    /**
+     * Push a conversation draft to the user's other devices. Opt-in; the draft
+     * text crosses the relay in cleartext and is never stored.
+     */
+    syncDraft(conversationId: string, draftText: string): void;
+    /** Listen for draft syncs from the user's other devices. */
+    onDraftSync(callback: DraftSyncCallback): () => void;
     /**
      * Register this device's push notification token. The platform delivers a
      * push via APNs / FCM / Web Push when a sender attaches a pushPayload to
@@ -240,6 +285,12 @@ export interface DropOnAirClient {
     finalizeAttachment(attachmentId: string, sha256: string): Promise<void>;
     /** Download (and for E2EE decrypt) an attachment referenced inside a received message. */
     downloadAttachment(ref: import('../attachment/attachment-types').AttachmentRef): Promise<import('../attachment/attachment-types').DownloadedAttachment>;
+    /**
+     * Revoke an attachment you sent (Phase 2f). The platform stops issuing
+     * download URLs for it and notifies recipients. Bytes already downloaded
+     * cannot be recalled.
+     */
+    revokeAttachment(attachmentId: string): Promise<void>;
     /** Send a cleartext message to a user (no encryption). */
     sendCleartextMessage(toUserId: string, plaintext: string): Promise<{
         messageId: string;
@@ -290,6 +341,14 @@ export interface DropOnAirClient {
     listGroups(): Promise<GroupInfo[]>;
     /** Get details of a specific group. */
     getGroup(groupId: string): Promise<GroupInfo>;
+    /**
+     * Update a group (requires OWNER/ADMIN role). Omitted fields are unchanged.
+     * `readReceiptsVisibleToGroup` toggles group-wide read-receipt visibility.
+     */
+    updateGroup(groupId: string, update: {
+        name?: string;
+        readReceiptsVisibleToGroup?: boolean;
+    }): Promise<GroupInfo>;
     /** Add members to a group (requires OWNER/ADMIN role). */
     addGroupMembers(groupId: string, userIds: string[]): Promise<GroupInfo>;
     /** Remove a member from a group (OWNER/ADMIN can remove others; anyone can leave). */

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { InitializeOptions, DropOnAirClient } from './core/types';
 export { SDK_VERSION, PROTOCOL_VERSION, PAYLOAD_FORMAT_VERSION } from './version';
 export declare function initialize(options: InitializeOptions): Promise<DropOnAirClient>;
-export type { InitializeOptions, DropOnAirClient, DropOnAirEvent, MessageCallback, EventCallback, DecryptedMessage, KeyStorageAdapter, CallEvent, CallEventType, CallEventCallback, TurnCredentials, BroadcastMessage, BroadcastCallback, GroupInfo, GroupMemberInfo, DecryptedGroupMessage, GroupMessageCallback, GroupCallEvent, GroupCallEventType, GroupCallEventCallback, MessageEditEvent, MessageEditCallback, MessageDeleteEvent, MessageDeleteCallback, DeviceInfo, ReadReceiptEvent, ReadReceiptCallback, } from './core/types';
+export type { InitializeOptions, DropOnAirClient, DropOnAirEvent, MessageCallback, EventCallback, DecryptedMessage, KeyStorageAdapter, CallEvent, CallEventType, CallEventCallback, TurnCredentials, BroadcastMessage, BroadcastCallback, GroupInfo, GroupMemberInfo, DecryptedGroupMessage, GroupMessageCallback, GroupCallEvent, GroupCallEventType, GroupCallEventCallback, MessageEditEvent, MessageEditCallback, MessageDeleteEvent, MessageDeleteCallback, DeviceInfo, ReadReceiptEvent, ReadReceiptCallback, NotificationClearEvent, NotificationClearCallback, DraftSyncEvent, DraftSyncCallback, } from './core/types';
 export type { AttachmentEncryptionType, AttachmentConversationType, AttachmentRef, DeviceWrappedKey, CreateUploadSessionOptions, UploadSession, PrepareAttachmentOptions, DownloadedAttachment, } from './attachment/attachment-types';
 declare const _default: {
     initialize: typeof initialize;

package/dist/transport/protobuf-codec.d.ts

@@ -20,6 +20,7 @@ export interface WireAttachmentRef {
     sha256: string;
     encryptionType: number;
     wrappedKeys?: WireDeviceWrappedKey[];
+    thumbnailAttachmentId?: string;
 }
 export interface WireEnvelope {
     messageId: string;
@@ -157,6 +158,8 @@ export interface WireSyncFrame {
     messageId: string;
     conversationId?: string;
     timestamp: number;
+    payload?: string;
+    fromUserId?: string;
 }
 /** Tombstone frame, scope FOR_EVERYONE or FOR_ME. */
 export interface WireMessageDeleteFrame {

package/dist/transport/protobuf-codec.js

@@ -59,7 +59,8 @@ const AttachmentRefType = new protobuf.Type('AttachmentRef')
     .add(new protobuf.Field('sizeBytes', 4, 'int64'))
     .add(new protobuf.Field('sha256', 5, 'string'))
     .add(new protobuf.Field('encryptionType', 6, 'EncryptionType'))
-    .add(new protobuf.Field('wrappedKeys', 7, 'DeviceWrappedKey', 'repeated'));
+    .add(new protobuf.Field('wrappedKeys', 7, 'DeviceWrappedKey', 'repeated'))
+    .add(new protobuf.Field('thumbnailAttachmentId', 8, 'string'));
 const EnvelopeType = new protobuf.Type('Envelope')
     .add(EncryptionTypeEnum)
     .add(DeviceEncryptedPayloadType) // nested type must be added first
@@ -224,7 +225,9 @@ const SyncFrameType = new protobuf.Type('SyncFrame')
     .add(new protobuf.Field('type', 1, 'string'))
     .add(new protobuf.Field('messageId', 2, 'string'))
     .add(new protobuf.Field('conversationId', 3, 'string'))
-    .add(new protobuf.Field('timestamp', 4, 'int64'));
+    .add(new protobuf.Field('timestamp', 4, 'int64'))
+    .add(new protobuf.Field('payload', 5, 'string'))
+    .add(new protobuf.Field('fromUserId', 6, 'string'));
 class ProtobufCodec {
     encodeEnvelope(value) {
         return EnvelopeType.encode(value).finish();

package/dist/version.d.ts

@@ -7,7 +7,7 @@
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-export declare const SDK_VERSION = "0.11.0";
+export declare const SDK_VERSION = "0.13.0";
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/dist/version.js

@@ -10,7 +10,7 @@ exports.PROTOCOL_VERSION = exports.PAYLOAD_FORMAT_VERSION = exports.SDK_VERSION
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-exports.SDK_VERSION = '0.11.0';
+exports.SDK_VERSION = '0.13.0';
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@droponair/sdk-js",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "DropOnAir SDK for end-to-end encrypted messaging",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",