@droponair/sdk-js 0.33.0 → 0.34.1

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # Changelog
 
+## 0.34.1
+
+### Fixed
+
+- **A file was deleted before the last recipient could download it.** With
+  `deleteWhenEveryoneHasIt`, the platform counted a recipient as having the file the
+  moment it issued their download link, so the final recipient got a link to a file
+  already gone. The SDK now confirms receipt only after the download and decrypt
+  succeed, and the platform deletes only on those confirmations. Nothing to change
+  in an app: it happens inside `downloadAttachment`.
+
+## 0.34.0
+
+### Added
+
+- **Files in group messages.** `sendGroupMessage(groupId, text, memberUserIds, { attachments })`
+  now carries attachment references, and a received `DecryptedGroupMessage` carries
+  `attachments`. Each member is handed the pointer and only the file keys wrapped for
+  their own devices. A file sent while a member was away arrives with the message when
+  they catch up, which previously carried nothing.
+- **A lifetime per file.** `retentionSeconds` on an upload session asks for one file to
+  live a set time. Never longer than the app's own retention.
+- **`deleteWhenEveryoneHasIt`.** The platform deletes the stored bytes as soon as every
+  recipient has fetched them, and answers a later request with "no longer available"
+  rather than a broken link.
+
 ## 0.33.0
 
 ### Added

package/README.md

@@ -346,6 +346,8 @@ client.onMessage(async (msg) => {
 | `prepareAttachmentAndUpload(bytes, options)` | `Promise<AttachmentRef>` | Encrypt (E2EE), upload, finalize, return ref |
 | `createUploadSession(options)` | `Promise<UploadSession>` | Low-level: presigned PUT URL only |
 | `finalizeAttachment(attachmentId, sha256)` | `Promise<void>` | Low-level: commit integrity hash |
+| `retentionSeconds` (upload option) | | How long this one file should live. Never granted longer than your own retention. |
+| `deleteWhenEveryoneHasIt` (upload option) | | Delete the stored bytes as soon as every recipient has fetched them. A later request is answered "no longer available". |
 | `downloadAttachment(ref)` | `Promise<DownloadedAttachment>` | Get presigned URL + download + decrypt |
 | `revokeAttachment(attachmentId \| ref)` | `Promise<void>` | Revoke an attachment you sent; recipients get `ATTACHMENT_REVOKED` |
 | `sendMessage(toUserId, text, { attachments })` | `Promise<{ messageId }>` | Send with attachments |

package/dist/attachment/attachment-client.d.ts

@@ -63,6 +63,8 @@ export declare class AttachmentClient {
      * current device, unwraps it, then decrypts the stored bytes.
      */
     downloadAttachment(ref: AttachmentRef): Promise<DownloadedAttachment>;
+    /** Best effort: a missed confirmation only means the copy waits for its own expiry. */
+    private confirmReceived;
     /** Convert public AttachmentRef into the wire-format type for proto encoding. */
     toWire(ref: AttachmentRef): WireAttachmentRef;
     /** Convert a wire AttachmentRef (from a received message) into the public type. */

package/dist/attachment/attachment-client.js

@@ -46,6 +46,10 @@ class AttachmentClient {
             conversationId: opts.conversationId ?? '',
             recipientUserIds: opts.recipientUserIds ?? [],
         };
+        if (opts.retentionSeconds !== undefined)
+            body.retentionSeconds = opts.retentionSeconds;
+        if (opts.deleteWhenEveryoneHasIt)
+            body.deleteWhenEveryoneHasIt = true;
         const resp = await this.deps.fetchFn(`${this.deps.httpUrl}/v1/attachments/upload-session`, {
             method: 'POST',
             headers: { Authorization: `Bearer ${jwt}`, 'Content-Type': 'application/json' },
@@ -194,6 +198,7 @@ class AttachmentClient {
         const arrayBuf = await resp.arrayBuffer();
         let stored = new Uint8Array(arrayBuf);
         if (ref.encryptionType === 'CLEARTEXT') {
+            await this.confirmReceived(ref.attachmentId);
             return { attachmentId: ref.attachmentId, mimeType: info.mimeType, sizeBytes: info.sizeBytes, sha256: info.sha256, bytes: stored };
         }
         const myDeviceId = await this.deps.getCurrentDeviceId();
@@ -210,6 +215,10 @@ class AttachmentClient {
         const ciphertext = stored.slice(12);
         const aesKey = await crypto.subtle.importKey('raw', asBufferSource(fileKey), { name: 'AES-GCM' }, false, ['decrypt']);
         const plain = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: asBufferSource(fileNonce), tagLength: 128 }, aesKey, asBufferSource(ciphertext));
+        // Only now, with the bytes downloaded and readable, does this device say it has
+        // the file. A download link is not a file, so the platform deletes the stored
+        // copy on this confirmation, never on the link.
+        await this.confirmReceived(ref.attachmentId);
         return {
             attachmentId: ref.attachmentId,
             mimeType: info.mimeType,
@@ -218,6 +227,20 @@ class AttachmentClient {
             bytes: new Uint8Array(plain),
         };
     }
+    /** Best effort: a missed confirmation only means the copy waits for its own expiry. */
+    async confirmReceived(attachmentId) {
+        try {
+            const jwt = await this.deps.getValidDropOnAirJwt();
+            await this.deps.fetchFn(`${this.deps.httpUrl}/v1/attachments/${encodeURIComponent(attachmentId)}/received`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${jwt}`, 'Content-Type': 'application/json' },
+                body: '{}',
+            });
+        }
+        catch {
+            // The download itself succeeded; nothing to surface.
+        }
+    }
     /** Convert public AttachmentRef into the wire-format type for proto encoding. */
     toWire(ref) {
         return {

package/dist/attachment/attachment-types.d.ts

@@ -44,6 +44,17 @@ export interface CreateUploadSessionOptions {
     conversationId?: string;
     /** Recipient user IDs (used by the server for download authorization). */
     recipientUserIds?: string[];
+    /**
+     * How long this one file should live, in seconds. Optional, and never granted
+     * longer than the app's own retention. An app that works out a window per file
+     * sets it here instead of living with one number for everything.
+     */
+    retentionSeconds?: number;
+    /**
+     * Delete the stored bytes as soon as every recipient has fetched them. The
+     * file then exists only on the devices it was sent to.
+     */
+    deleteWhenEveryoneHasIt?: boolean;
 }
 /** Result of reserving an upload session. */
 export interface UploadSession {

package/dist/core/messaging-client.js

@@ -1863,6 +1863,7 @@ class MessagingClient {
                 fromUserId: notif.fromUserId,
                 timestamp: notif.timestamp,
                 plaintext,
+                attachments: (notif.attachments ?? []).map(a => attachment_client_1.AttachmentClient.fromWire(a)),
             };
             for (const listener of this.groupMessageListeners) {
                 listener(msg);
@@ -2643,6 +2644,24 @@ class MessagingClient {
                         encryptedPayload: (0, bytes_1.fromBase64)(dp.encryptedPayloadBase64),
                         senderPublicKey: (0, bytes_1.fromBase64)(dp.senderPublicKeyBase64),
                     })),
+                    // Files travel with a late message too. Without this, somebody who was
+                    // away came back to a message that mentioned nothing at all: the live
+                    // path carried the pointer and the catch-up did not.
+                    attachments: (offline.attachments ?? []).map(a => ({
+                        attachmentId: a.attachmentId,
+                        storageHint: a.storageHint ?? '',
+                        mimeType: a.mimeType ?? '',
+                        sizeBytes: a.sizeBytes ?? 0,
+                        sha256: a.sha256 ?? '',
+                        encryptionType: a.encryptionType === 'CLEARTEXT' ? 1 : 0,
+                        thumbnailAttachmentId: a.thumbnailAttachmentId ?? '',
+                        wrappedKeys: (a.wrappedKeys ?? []).map(k => ({
+                            deviceId: k.deviceId,
+                            wrappedKey: (0, bytes_1.fromBase64)(k.wrappedKeyBase64 ?? ''),
+                            senderPublicKey: (0, bytes_1.fromBase64)(k.senderPublicKeyBase64 ?? ''),
+                            nonce: (0, bytes_1.fromBase64)(k.nonceBase64 ?? ''),
+                        })),
+                    })),
                 };
                 // The same path a live message takes, so decryption, de-duplication and
                 // the callback behave identically.

package/dist/core/types.d.ts

@@ -222,6 +222,12 @@ export interface DecryptedGroupMessage {
     fromUserId: string;
     timestamp: number;
     plaintext: string;
+    /**
+     * Files this message points at, if any. The bytes are fetched separately with
+     * `downloadAttachment`; what arrives here is the pointer and the file key
+     * wrapped for this device.
+     */
+    attachments?: import('../attachment/attachment-types').AttachmentRef[];
 }
 export type GroupMessageCallback = (message: DecryptedGroupMessage) => void;
 export type GroupCallEventType = 'GROUP_CALL_INVITE' | 'GROUP_CALL_RINGING' | 'GROUP_CALL_JOIN' | 'GROUP_CALL_LEAVE' | 'GROUP_CALL_END' | 'GROUP_CALL_ENDED' | 'GROUP_CALL_PARTICIPANT_JOINED' | 'GROUP_CALL_PARTICIPANT_LEFT' | 'GROUP_CALL_PARTICIPANT_REMOVED' | 'GROUP_CALL_ALREADY_ACTIVE' | 'GROUP_CALL_SDP_OFFER' | 'GROUP_CALL_SDP_ANSWER' | 'GROUP_CALL_ICE_CANDIDATE' | 'GROUP_CALL_SCREEN_SHARE_STARTED' | 'GROUP_CALL_SCREEN_SHARE_STOPPED' | 'GROUP_CALL_HOST_TRANSFER' | 'GROUP_CALL_COHOST_APPOINT' | 'GROUP_CALL_COHOST_REVOKE' | 'GROUP_CALL_ROLE_CHANGED' | 'GROUP_CALL_MUTE_PARTICIPANT' | 'GROUP_CALL_REMOVE_PARTICIPANT' | 'GROUP_CALL_WAITING_ROOM_REQUEST' | 'GROUP_CALL_WAITING_ROOM_JOINED' | 'GROUP_CALL_WAITING_ROOM_ADMIT' | 'GROUP_CALL_WAITING_ROOM_ADMITTED' | 'GROUP_CALL_WAITING_ROOM_REJECT' | 'GROUP_CALL_WAITING_ROOM_REJECTED' | 'GROUP_CALL_JOINED' | 'GROUP_CALL_WAITING_ROOM_PENDING' | 'GROUP_CALL_HOST_REQUIRED' | 'GROUP_CALL_ROOM_CLOSED' | 'GROUP_CALL_STAGE_HAND_RAISED' | 'GROUP_CALL_STAGE_HAND_LOWERED' | 'GROUP_CALL_STAGE_PROMOTE' | 'GROUP_CALL_STAGE_DEMOTE' | 'GROUP_CALL_STAGE_QUESTION' | 'GROUP_CALL_RECORDING_STARTED' | 'GROUP_CALL_RECORDING_STOPPED' | 'GROUP_CALL_RECORDING_AVAILABLE';

package/dist/version.d.ts

@@ -7,7 +7,7 @@
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-export declare const SDK_VERSION = "0.33.0";
+export declare const SDK_VERSION = "0.34.1";
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/dist/version.js

@@ -10,7 +10,7 @@ exports.PROTOCOL_VERSION = exports.PAYLOAD_FORMAT_VERSION = exports.SDK_VERSION
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-exports.SDK_VERSION = '0.33.0';
+exports.SDK_VERSION = '0.34.1';
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@droponair/sdk-js",
-  "version": "0.33.0",
+  "version": "0.34.1",
   "description": "End-to-end encrypted messaging, voice and video calling SDK. The relay never sees your keys or message content.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",