@droponair/sdk-js 0.34.0 → 0.34.1

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.34.1
+
+### Fixed
+
+- **A file was deleted before the last recipient could download it.** With
+  `deleteWhenEveryoneHasIt`, the platform counted a recipient as having the file the
+  moment it issued their download link, so the final recipient got a link to a file
+  already gone. The SDK now confirms receipt only after the download and decrypt
+  succeed, and the platform deletes only on those confirmations. Nothing to change
+  in an app: it happens inside `downloadAttachment`.
+
 ## 0.34.0
 
 ### Added

package/dist/attachment/attachment-client.d.ts

@@ -63,6 +63,8 @@ export declare class AttachmentClient {
      * current device, unwraps it, then decrypts the stored bytes.
      */
     downloadAttachment(ref: AttachmentRef): Promise<DownloadedAttachment>;
+    /** Best effort: a missed confirmation only means the copy waits for its own expiry. */
+    private confirmReceived;
     /** Convert public AttachmentRef into the wire-format type for proto encoding. */
     toWire(ref: AttachmentRef): WireAttachmentRef;
     /** Convert a wire AttachmentRef (from a received message) into the public type. */

package/dist/attachment/attachment-client.js

@@ -198,6 +198,7 @@ class AttachmentClient {
         const arrayBuf = await resp.arrayBuffer();
         let stored = new Uint8Array(arrayBuf);
         if (ref.encryptionType === 'CLEARTEXT') {
+            await this.confirmReceived(ref.attachmentId);
             return { attachmentId: ref.attachmentId, mimeType: info.mimeType, sizeBytes: info.sizeBytes, sha256: info.sha256, bytes: stored };
         }
         const myDeviceId = await this.deps.getCurrentDeviceId();
@@ -214,6 +215,10 @@ class AttachmentClient {
         const ciphertext = stored.slice(12);
         const aesKey = await crypto.subtle.importKey('raw', asBufferSource(fileKey), { name: 'AES-GCM' }, false, ['decrypt']);
         const plain = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: asBufferSource(fileNonce), tagLength: 128 }, aesKey, asBufferSource(ciphertext));
+        // Only now, with the bytes downloaded and readable, does this device say it has
+        // the file. A download link is not a file, so the platform deletes the stored
+        // copy on this confirmation, never on the link.
+        await this.confirmReceived(ref.attachmentId);
         return {
             attachmentId: ref.attachmentId,
             mimeType: info.mimeType,
@@ -222,6 +227,20 @@ class AttachmentClient {
             bytes: new Uint8Array(plain),
         };
     }
+    /** Best effort: a missed confirmation only means the copy waits for its own expiry. */
+    async confirmReceived(attachmentId) {
+        try {
+            const jwt = await this.deps.getValidDropOnAirJwt();
+            await this.deps.fetchFn(`${this.deps.httpUrl}/v1/attachments/${encodeURIComponent(attachmentId)}/received`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${jwt}`, 'Content-Type': 'application/json' },
+                body: '{}',
+            });
+        }
+        catch {
+            // The download itself succeeded; nothing to surface.
+        }
+    }
     /** Convert public AttachmentRef into the wire-format type for proto encoding. */
     toWire(ref) {
         return {

package/dist/version.d.ts

@@ -7,7 +7,7 @@
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-export declare const SDK_VERSION = "0.34.0";
+export declare const SDK_VERSION = "0.34.1";
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/dist/version.js

@@ -10,7 +10,7 @@ exports.PROTOCOL_VERSION = exports.PAYLOAD_FORMAT_VERSION = exports.SDK_VERSION
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-exports.SDK_VERSION = '0.34.0';
+exports.SDK_VERSION = '0.34.1';
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@droponair/sdk-js",
-  "version": "0.34.0",
+  "version": "0.34.1",
   "description": "End-to-end encrypted messaging, voice and video calling SDK. The relay never sees your keys or message content.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",