@droponair/sdk-js 0.33.0 → 0.34.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.34.0
+
+### Added
+
+- **Files in group messages.** `sendGroupMessage(groupId, text, memberUserIds, { attachments })`
+  now carries attachment references, and a received `DecryptedGroupMessage` carries
+  `attachments`. Each member is handed the pointer and only the file keys wrapped for
+  their own devices. A file sent while a member was away arrives with the message when
+  they catch up, which previously carried nothing.
+- **A lifetime per file.** `retentionSeconds` on an upload session asks for one file to
+  live a set time. Never longer than the app's own retention.
+- **`deleteWhenEveryoneHasIt`.** The platform deletes the stored bytes as soon as every
+  recipient has fetched them, and answers a later request with "no longer available"
+  rather than a broken link.
+
 ## 0.33.0
 
 ### Added

package/README.md

@@ -346,6 +346,8 @@ client.onMessage(async (msg) => {
 | `prepareAttachmentAndUpload(bytes, options)` | `Promise<AttachmentRef>` | Encrypt (E2EE), upload, finalize, return ref |
 | `createUploadSession(options)` | `Promise<UploadSession>` | Low-level: presigned PUT URL only |
 | `finalizeAttachment(attachmentId, sha256)` | `Promise<void>` | Low-level: commit integrity hash |
+| `retentionSeconds` (upload option) | | How long this one file should live. Never granted longer than your own retention. |
+| `deleteWhenEveryoneHasIt` (upload option) | | Delete the stored bytes as soon as every recipient has fetched them. A later request is answered "no longer available". |
 | `downloadAttachment(ref)` | `Promise<DownloadedAttachment>` | Get presigned URL + download + decrypt |
 | `revokeAttachment(attachmentId \| ref)` | `Promise<void>` | Revoke an attachment you sent; recipients get `ATTACHMENT_REVOKED` |
 | `sendMessage(toUserId, text, { attachments })` | `Promise<{ messageId }>` | Send with attachments |

package/dist/attachment/attachment-client.js

@@ -46,6 +46,10 @@ class AttachmentClient {
             conversationId: opts.conversationId ?? '',
             recipientUserIds: opts.recipientUserIds ?? [],
         };
+        if (opts.retentionSeconds !== undefined)
+            body.retentionSeconds = opts.retentionSeconds;
+        if (opts.deleteWhenEveryoneHasIt)
+            body.deleteWhenEveryoneHasIt = true;
         const resp = await this.deps.fetchFn(`${this.deps.httpUrl}/v1/attachments/upload-session`, {
             method: 'POST',
             headers: { Authorization: `Bearer ${jwt}`, 'Content-Type': 'application/json' },

package/dist/attachment/attachment-types.d.ts

@@ -44,6 +44,17 @@ export interface CreateUploadSessionOptions {
     conversationId?: string;
     /** Recipient user IDs (used by the server for download authorization). */
     recipientUserIds?: string[];
+    /**
+     * How long this one file should live, in seconds. Optional, and never granted
+     * longer than the app's own retention. An app that works out a window per file
+     * sets it here instead of living with one number for everything.
+     */
+    retentionSeconds?: number;
+    /**
+     * Delete the stored bytes as soon as every recipient has fetched them. The
+     * file then exists only on the devices it was sent to.
+     */
+    deleteWhenEveryoneHasIt?: boolean;
 }
 /** Result of reserving an upload session. */
 export interface UploadSession {

package/dist/core/messaging-client.js

@@ -1863,6 +1863,7 @@ class MessagingClient {
                 fromUserId: notif.fromUserId,
                 timestamp: notif.timestamp,
                 plaintext,
+                attachments: (notif.attachments ?? []).map(a => attachment_client_1.AttachmentClient.fromWire(a)),
             };
             for (const listener of this.groupMessageListeners) {
                 listener(msg);
@@ -2643,6 +2644,24 @@ class MessagingClient {
                         encryptedPayload: (0, bytes_1.fromBase64)(dp.encryptedPayloadBase64),
                         senderPublicKey: (0, bytes_1.fromBase64)(dp.senderPublicKeyBase64),
                     })),
+                    // Files travel with a late message too. Without this, somebody who was
+                    // away came back to a message that mentioned nothing at all: the live
+                    // path carried the pointer and the catch-up did not.
+                    attachments: (offline.attachments ?? []).map(a => ({
+                        attachmentId: a.attachmentId,
+                        storageHint: a.storageHint ?? '',
+                        mimeType: a.mimeType ?? '',
+                        sizeBytes: a.sizeBytes ?? 0,
+                        sha256: a.sha256 ?? '',
+                        encryptionType: a.encryptionType === 'CLEARTEXT' ? 1 : 0,
+                        thumbnailAttachmentId: a.thumbnailAttachmentId ?? '',
+                        wrappedKeys: (a.wrappedKeys ?? []).map(k => ({
+                            deviceId: k.deviceId,
+                            wrappedKey: (0, bytes_1.fromBase64)(k.wrappedKeyBase64 ?? ''),
+                            senderPublicKey: (0, bytes_1.fromBase64)(k.senderPublicKeyBase64 ?? ''),
+                            nonce: (0, bytes_1.fromBase64)(k.nonceBase64 ?? ''),
+                        })),
+                    })),
                 };
                 // The same path a live message takes, so decryption, de-duplication and
                 // the callback behave identically.

package/dist/core/types.d.ts

@@ -222,6 +222,12 @@ export interface DecryptedGroupMessage {
     fromUserId: string;
     timestamp: number;
     plaintext: string;
+    /**
+     * Files this message points at, if any. The bytes are fetched separately with
+     * `downloadAttachment`; what arrives here is the pointer and the file key
+     * wrapped for this device.
+     */
+    attachments?: import('../attachment/attachment-types').AttachmentRef[];
 }
 export type GroupMessageCallback = (message: DecryptedGroupMessage) => void;
 export type GroupCallEventType = 'GROUP_CALL_INVITE' | 'GROUP_CALL_RINGING' | 'GROUP_CALL_JOIN' | 'GROUP_CALL_LEAVE' | 'GROUP_CALL_END' | 'GROUP_CALL_ENDED' | 'GROUP_CALL_PARTICIPANT_JOINED' | 'GROUP_CALL_PARTICIPANT_LEFT' | 'GROUP_CALL_PARTICIPANT_REMOVED' | 'GROUP_CALL_ALREADY_ACTIVE' | 'GROUP_CALL_SDP_OFFER' | 'GROUP_CALL_SDP_ANSWER' | 'GROUP_CALL_ICE_CANDIDATE' | 'GROUP_CALL_SCREEN_SHARE_STARTED' | 'GROUP_CALL_SCREEN_SHARE_STOPPED' | 'GROUP_CALL_HOST_TRANSFER' | 'GROUP_CALL_COHOST_APPOINT' | 'GROUP_CALL_COHOST_REVOKE' | 'GROUP_CALL_ROLE_CHANGED' | 'GROUP_CALL_MUTE_PARTICIPANT' | 'GROUP_CALL_REMOVE_PARTICIPANT' | 'GROUP_CALL_WAITING_ROOM_REQUEST' | 'GROUP_CALL_WAITING_ROOM_JOINED' | 'GROUP_CALL_WAITING_ROOM_ADMIT' | 'GROUP_CALL_WAITING_ROOM_ADMITTED' | 'GROUP_CALL_WAITING_ROOM_REJECT' | 'GROUP_CALL_WAITING_ROOM_REJECTED' | 'GROUP_CALL_JOINED' | 'GROUP_CALL_WAITING_ROOM_PENDING' | 'GROUP_CALL_HOST_REQUIRED' | 'GROUP_CALL_ROOM_CLOSED' | 'GROUP_CALL_STAGE_HAND_RAISED' | 'GROUP_CALL_STAGE_HAND_LOWERED' | 'GROUP_CALL_STAGE_PROMOTE' | 'GROUP_CALL_STAGE_DEMOTE' | 'GROUP_CALL_STAGE_QUESTION' | 'GROUP_CALL_RECORDING_STARTED' | 'GROUP_CALL_RECORDING_STOPPED' | 'GROUP_CALL_RECORDING_AVAILABLE';

package/dist/version.d.ts

@@ -7,7 +7,7 @@
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-export declare const SDK_VERSION = "0.33.0";
+export declare const SDK_VERSION = "0.34.0";
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/dist/version.js

@@ -10,7 +10,7 @@ exports.PROTOCOL_VERSION = exports.PAYLOAD_FORMAT_VERSION = exports.SDK_VERSION
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-exports.SDK_VERSION = '0.33.0';
+exports.SDK_VERSION = '0.34.0';
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@droponair/sdk-js",
-  "version": "0.33.0",
+  "version": "0.34.0",
   "description": "End-to-end encrypted messaging, voice and video calling SDK. The relay never sees your keys or message content.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",