@droponair/sdk-js 0.34.0 → 0.34.2

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 0.34.2
+
+### Fixed
+
+- **`retentionSeconds` and `deleteWhenEveryoneHasIt` were ignored by
+  `prepareAttachmentAndUpload`.** They reached the upload session only when it was
+  called directly; the everyday path dropped them, so a file lived for the app's
+  full retention and was never deleted early. Both now pass through, thumbnail
+  included.
+
+## 0.34.1
+
+### Fixed
+
+- **A file was deleted before the last recipient could download it.** With
+  `deleteWhenEveryoneHasIt`, the platform counted a recipient as having the file the
+  moment it issued their download link, so the final recipient got a link to a file
+  already gone. The SDK now confirms receipt only after the download and decrypt
+  succeed, and the platform deletes only on those confirmations. Nothing to change
+  in an app: it happens inside `downloadAttachment`.
+
 ## 0.34.0
 
 ### Added

package/dist/attachment/attachment-client.d.ts

@@ -63,6 +63,8 @@ export declare class AttachmentClient {
      * current device, unwraps it, then decrypts the stored bytes.
      */
     downloadAttachment(ref: AttachmentRef): Promise<DownloadedAttachment>;
+    /** Best effort: a missed confirmation only means the copy waits for its own expiry. */
+    private confirmReceived;
     /** Convert public AttachmentRef into the wire-format type for proto encoding. */
     toWire(ref: AttachmentRef): WireAttachmentRef;
     /** Convert a wire AttachmentRef (from a received message) into the public type. */

package/dist/attachment/attachment-client.js

@@ -132,6 +132,8 @@ class AttachmentClient {
             conversationType,
             conversationId: opts.groupId,
             recipientUserIds,
+            retentionSeconds: opts.retentionSeconds,
+            deleteWhenEveryoneHasIt: opts.deleteWhenEveryoneHasIt,
         });
         await this.uploadBytes(session, storedBytes, opts.onUploadProgress);
         await this.finalize(session.attachmentId, sha256);
@@ -198,6 +200,7 @@ class AttachmentClient {
         const arrayBuf = await resp.arrayBuffer();
         let stored = new Uint8Array(arrayBuf);
         if (ref.encryptionType === 'CLEARTEXT') {
+            await this.confirmReceived(ref.attachmentId);
             return { attachmentId: ref.attachmentId, mimeType: info.mimeType, sizeBytes: info.sizeBytes, sha256: info.sha256, bytes: stored };
         }
         const myDeviceId = await this.deps.getCurrentDeviceId();
@@ -214,6 +217,10 @@ class AttachmentClient {
         const ciphertext = stored.slice(12);
         const aesKey = await crypto.subtle.importKey('raw', asBufferSource(fileKey), { name: 'AES-GCM' }, false, ['decrypt']);
         const plain = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: asBufferSource(fileNonce), tagLength: 128 }, aesKey, asBufferSource(ciphertext));
+        // Only now, with the bytes downloaded and readable, does this device say it has
+        // the file. A download link is not a file, so the platform deletes the stored
+        // copy on this confirmation, never on the link.
+        await this.confirmReceived(ref.attachmentId);
         return {
             attachmentId: ref.attachmentId,
             mimeType: info.mimeType,
@@ -222,6 +229,20 @@ class AttachmentClient {
             bytes: new Uint8Array(plain),
         };
     }
+    /** Best effort: a missed confirmation only means the copy waits for its own expiry. */
+    async confirmReceived(attachmentId) {
+        try {
+            const jwt = await this.deps.getValidDropOnAirJwt();
+            await this.deps.fetchFn(`${this.deps.httpUrl}/v1/attachments/${encodeURIComponent(attachmentId)}/received`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${jwt}`, 'Content-Type': 'application/json' },
+                body: '{}',
+            });
+        }
+        catch {
+            // The download itself succeeded; nothing to surface.
+        }
+    }
     /** Convert public AttachmentRef into the wire-format type for proto encoding. */
     toWire(ref) {
         return {

package/dist/attachment/attachment-types.d.ts

@@ -83,6 +83,10 @@ export interface PrepareAttachmentOptions {
     mimeType?: string;
     /** Progress callback called with bytes uploaded so far. */
     onUploadProgress?: (bytesUploaded: number, totalBytes: number) => void;
+    /** How long this one file should live, in seconds. Never granted longer than your own retention. */
+    retentionSeconds?: number;
+    /** Delete the stored bytes as soon as every recipient has confirmed they have them. */
+    deleteWhenEveryoneHasIt?: boolean;
     /**
      * Optional preview thumbnail bytes. Entirely the developer's choice - if
      * provided, the SDK uploads it as a separate attachment (encrypted with the

package/dist/version.d.ts

@@ -7,7 +7,7 @@
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-export declare const SDK_VERSION = "0.34.0";
+export declare const SDK_VERSION = "0.34.2";
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/dist/version.js

@@ -10,7 +10,7 @@ exports.PROTOCOL_VERSION = exports.PAYLOAD_FORMAT_VERSION = exports.SDK_VERSION
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-exports.SDK_VERSION = '0.34.0';
+exports.SDK_VERSION = '0.34.2';
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@droponair/sdk-js",
-  "version": "0.34.0",
+  "version": "0.34.2",
   "description": "End-to-end encrypted messaging, voice and video calling SDK. The relay never sees your keys or message content.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",