@droponair/sdk-js 0.3.0

package/CHANGELOG.md

@@ -0,0 +1,65 @@
+# Changelog
+
+All notable changes to the DropOnAir JS SDK will be documented in this file.
+
+This project follows [Semantic Versioning](https://semver.org/).
+
+---
+
+## [0.3.0], 2026-04-04
+
+### Added
+- **Group messaging (E2EE + cleartext):** Create groups, manage members, and send encrypted or cleartext messages to all group members at once
+- **Group management REST API:** `createGroup()`, `listGroups()`, `getGroupMembers()`, `addGroupMembers()`, `removeGroupMembers()`, `deleteGroup()`
+- **E2EE group send:** `sendGroupMessage()`, sender-side fan-out encrypts per-member per-device using existing X25519 + AES-256-GCM
+- **Cleartext group send:** Send plaintext group messages with zero crypto overhead for public groups
+- **Group message events:** `onGroupMessage()` / `offGroupMessage()` callbacks for inbound group messages
+- **Group voice & video calls:** Mesh WebRTC group calling with signaling over the same encrypted WebSocket
+- **Group call lifecycle:** `startGroupCall()`, `joinGroupCall()`, `leaveGroupCall()`, `endGroupCall()`
+- **Group call signaling:** `sendGroupCallSignal()` for SDP/ICE exchange between mesh peers
+- **Group call events:** `onGroupCallEvent()` / `offGroupCallEvent()` for OFFER, ANSWER, ICE, JOIN, LEAVE, END events
+- **New proto frame types:** `GroupEnvelope`, `GroupMessageNotification`, `GroupAck`, `GroupCallFrame`, `GroupMemberPayload`
+- **Per-plan group limits:** `maxGroupsPerApp`, `maxGroupMembers`, `maxGroupMessagesPerMonth`, `maxGroupCallMinutesPerMonth`, `maxGroupCallParticipants`
+- **New usage types:** `GROUP_MESSAGE`, `GROUP_CALL_MINUTE` with independent billing and quotas
+
+### Changed
+- `PROTOCOL_VERSION` bumped from `1` to `2` (new group proto frame types)
+- Package version bumped from `0.2.0` to `0.3.0`
+
+---
+
+## [0.2.0], 2026-02-28
+
+### Added
+- **SDK versioning infrastructure:** `SDK_VERSION`, `PROTOCOL_VERSION`, and `PAYLOAD_FORMAT_VERSION` exported from `src/version.ts`
+- **Version telemetry:** `X-SDK-Version` header sent on token exchange; `sdkVersion` and `protocolVersion` query params on WebSocket handshake
+- **Server info endpoint:** SDK-BE now exposes `GET /api/info` (no auth) returning `protocolVersion`, `minSdkVersion`, and supported `features`
+- **Multi-device E2EE:** Per-device encrypted payloads (`devicePayloads[]` in Envelope proto), sender encrypts once per recipient device + self-sync to own other devices
+- **Self-sync:** Sent messages are encrypted for the sender's other devices so all devices see the conversation in real time
+- **Legacy fallback:** When recipient has no device keys, SDK falls back to single `encryptedPayload` path for backward compat with older clients
+- **Call signaling:** Full WebRTC call lifecycle (invite → ringing → accept/reject → SDP/ICE relay → end) over the same WebSocket
+- **TURN credentials:** `fetchTurnCredentials()` for NAT traversal
+- **Manual ack support:** `autoAckIncomingMessages` option to defer PROCESSED acks until app decides
+- **Proactive token rotation:** JWT refreshed 90s before expiry to prevent silent failures
+- **iOS background recovery:** Visibility-change handler detects when app returns from background and re-evaluates JWT state
+
+### Changed
+- Package version bumped from `0.1.0` to `0.2.0`
+- Encrypted payload format now imports version constant from `src/version.ts` instead of inline magic number
+
+### Fixed
+- JWT expiry race condition: `sendMessage()` now fails fast with `JWT_EXPIRED` error instead of letting the server reject the frame
+
+---
+
+## [0.1.0], 2026-02-15
+
+### Added
+- Initial SDK release
+- X25519 ECDH key agreement + AES-256-GCM encryption
+- Protobuf binary WebSocket transport
+- IndexedDB secure key storage with in-memory fallback
+- Automatic reconnect with exponential backoff
+- Rate limit detection (LIMIT_REACHED event)
+- Impersonation detection
+- Offline message fetch on reconnect

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2025 DropOnAir
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.