@droponair/sdk-js 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -6,6 +6,42 @@ This project follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [0.7.0], 2026-05-19
+
+### Added
+- **Conference moderation and waiting room.** Host designated to the call
+  initiator and transferable mid-call; host can appoint co-hosts. Host and
+  co-host can mute and remove participants and admit / reject users from a
+  waiting room. If the host leaves without transferring, the server
+  auto-promotes the longest-joined remaining participant.
+- New `client` methods:
+  - `transferHost(callId, groupId, newHostUserId)`
+  - `appointCoHost(callId, groupId, userId)` / `revokeCoHost(callId, groupId, userId)`
+  - `muteParticipant(callId, groupId, targetUserId)` (signaling hint; the
+    target SDK applies the mute locally)
+  - `removeParticipant(callId, groupId, targetUserId)` (server-enforced; the
+    target is dropped from the call session)
+  - `requestWaitingRoomEntry(callId, groupId)` (would-be joiner side)
+  - `admitFromWaitingRoom(callId, groupId, userId)` / `rejectFromWaitingRoom(callId, groupId, userId)`
+- New `GroupCallEventType` values: `'GROUP_CALL_HOST_TRANSFER'`,
+  `'GROUP_CALL_COHOST_APPOINT'`, `'GROUP_CALL_COHOST_REVOKE'`,
+  `'GROUP_CALL_ROLE_CHANGED'`, `'GROUP_CALL_MUTE_PARTICIPANT'`,
+  `'GROUP_CALL_REMOVE_PARTICIPANT'`, `'GROUP_CALL_PARTICIPANT_REMOVED'`,
+  `'GROUP_CALL_WAITING_ROOM_REQUEST'`, `'GROUP_CALL_WAITING_ROOM_JOINED'`,
+  `'GROUP_CALL_WAITING_ROOM_ADMIT'`, `'GROUP_CALL_WAITING_ROOM_ADMITTED'`,
+  `'GROUP_CALL_WAITING_ROOM_REJECT'`, `'GROUP_CALL_WAITING_ROOM_REJECTED'`.
+- `GET /api/info` now advertises `"moderation"` in the `features` array.
+
+### Notes
+- Wire-level additive: legacy 0.6.x clients ignore the new signal type
+  strings (string discriminators on the existing `GroupCallFrame.type`).
+  No proto schema change, no `PROTOCOL_VERSION` bump.
+- Availability depends on your plan. See the
+  [pricing page](https://www.droponair.com/pricing) and your dashboard
+  Subscription page for what's enabled on your app.
+
+---
+
 ## [0.6.0], 2026-05-18
 
 ### Added

package/README.md

@@ -160,7 +160,7 @@ client.onMessage(async (msg) => {
 | `sendMessage(toUserId, text, { attachments })` | `Promise<{ messageId }>` | Send with attachments |
 
 - E2EE: a random AES-256-GCM file key encrypts the bytes; the file key is wrapped per recipient device using X25519 + HKDF (same model as message payloads). Server never sees the unwrapped file key.
-- Plan limits: `maxAttachmentSizeMb` per file + `maxAttachmentsPerMonth`. Enforced server-side before the presigned URL is issued.
+- Availability and per-file / per-month limits depend on your plan and are enforced server-side before the presigned URL is issued. See the [pricing page](https://www.droponair.com/pricing) and your dashboard Subscription page for what's enabled on your app.
 - Upload URL TTL = 15 min. Download URL TTL = 5 min. Download authorization checks that the requester is the original sender or in the captured recipient list.
 
 ### Broadcast Channels
@@ -252,7 +252,46 @@ client.onGroupCallEvent((evt) => {
 
 - The server enforces **one concurrent sharer per group call**. If another participant already holds the slot when you call `startGroupScreenShare`, the SDK delivers a `GROUP_CALL_SCREEN_SHARE_STOPPED` event with the current holder's userId in `payload`, so you can roll back the optimistic UI.
 - When a sharer leaves the call, the server broadcasts a STOPPED event to remaining participants before they see `PARTICIPANT_LEFT`.
-- Plan gate: `screen_sharing` is on `PRO`/`GROWTH`/`PAYG`/`ENTERPRISE`, off on `FREE`. Read `subscription.featuresEnabled.screen_sharing` on your backend to decide whether to expose the share button.
+- Availability depends on your plan. See the [pricing page](https://www.droponair.com/pricing) and your dashboard Subscription page for what's enabled on your app.
+
+### Conference moderation and waiting room
+
+Available since SDK `0.7.0`. The call initiator is the default host; host can transfer the role mid-call or appoint co-hosts. Host and co-host can mute, remove, and gate joiners through a waiting room. If the host leaves without transferring, the server auto-promotes the longest-joined remaining participant and broadcasts `GROUP_CALL_ROLE_CHANGED`.
+
+```typescript
+// Host actions
+client.transferHost(callId, groupId, 'alice');
+client.appointCoHost(callId, groupId, 'bob');
+client.muteParticipant(callId, groupId, 'eve');           // signaling hint
+client.removeParticipant(callId, groupId, 'mallory');     // server-enforced drop
+
+// Waiting room
+client.requestWaitingRoomEntry(callId, groupId);          // would-be joiner side
+client.admitFromWaitingRoom(callId, groupId, 'newbie');   // host / co-host
+client.rejectFromWaitingRoom(callId, groupId, 'troll');
+
+client.onGroupCallEvent((evt) => {
+  if (evt.type === 'GROUP_CALL_ROLE_CHANGED')          updateHostUi(evt.payload);   // {"userId":"...","role":"HOST|CO_HOST|PARTICIPANT"}
+  if (evt.type === 'GROUP_CALL_WAITING_ROOM_JOINED')   showWaitingApprovalPrompt(evt.payload);
+  if (evt.type === 'GROUP_CALL_WAITING_ROOM_ADMITTED') joinTheCall(evt.callId, evt.groupId);
+  if (evt.type === 'GROUP_CALL_MUTE_PARTICIPANT')      muteMyMicLocally();
+  if (evt.type === 'GROUP_CALL_PARTICIPANT_REMOVED')   exitCallUi();
+});
+```
+
+| Method | Returns | Description |
+|--------|---------|-------------|
+| `transferHost(callId, groupId, newHostUserId)` | `void` | Host only |
+| `appointCoHost(callId, groupId, userId)` | `void` | Host only |
+| `revokeCoHost(callId, groupId, userId)` | `void` | Host only |
+| `muteParticipant(callId, groupId, targetUserId)` | `void` | Host / co-host. Signaling hint - the target SDK mutes the local mic. |
+| `removeParticipant(callId, groupId, targetUserId)` | `void` | Host / co-host. Server drops the target from the call session. |
+| `requestWaitingRoomEntry(callId, groupId)` | `void` | Would-be joiner |
+| `admitFromWaitingRoom(callId, groupId, userId)` | `void` | Host / co-host |
+| `rejectFromWaitingRoom(callId, groupId, userId)` | `void` | Host / co-host |
+
+- Mute is intentionally a signaling hint: WebRTC media tracks can't be muted from outside the producing client. Remove is server-enforced - the target SDK receives `GROUP_CALL_PARTICIPANT_REMOVED` and the others receive `PARTICIPANT_LEFT`.
+- Availability depends on your plan. See the [pricing page](https://www.droponair.com/pricing) and your dashboard Subscription page for what's enabled on your app.
 
 ## Security
 

package/dist/attachment/attachment-client.d.ts

@@ -21,8 +21,8 @@ interface AttachmentClientDeps {
     logError: (stage: string, data?: Record<string, unknown>) => void;
 }
 /**
- * SDK-side coordinator for phase1/attachments. Handles:
- *  - createUploadSession: reserves an attachmentId + presigned PUT URL via sdk-be.
+ * SDK-side coordinator for attachments. Handles:
+ *  - createUploadSession: reserves an attachmentId + presigned PUT URL.
  *  - uploadBytes: PUTs bytes directly to the customer's bucket.
  *  - finalize: confirms upload + commits sha256.
  *  - prepareAttachmentAndUpload: convenience wrapper that does upload session,

package/dist/attachment/attachment-client.js

@@ -20,8 +20,8 @@ async function sha256Hex(bytes) {
     return hex.join('');
 }
 /**
- * SDK-side coordinator for phase1/attachments. Handles:
- *  - createUploadSession: reserves an attachmentId + presigned PUT URL via sdk-be.
+ * SDK-side coordinator for attachments. Handles:
+ *  - createUploadSession: reserves an attachmentId + presigned PUT URL.
  *  - uploadBytes: PUTs bytes directly to the customer's bucket.
  *  - finalize: confirms upload + commits sha256.
  *  - prepareAttachmentAndUpload: convenience wrapper that does upload session,

package/dist/attachment/attachment-types.js

@@ -4,7 +4,7 @@
 //
 // DropOnAir never holds file bytes. The SDK uploads/downloads directly
 // against the customer's storage bucket via short-lived presigned URLs
-// minted by sdk-be. For E2EE messages a per-attachment AES-256-GCM file
+// minted by the DropOnAir platform. For E2EE messages a per-attachment AES-256-GCM file
 // key is wrapped per recipient device using the same X25519 + HKDF path
 // used for message payloads.
 // ---------------------------------------------------------------------------

package/dist/core/messaging-client.d.ts

@@ -139,6 +139,14 @@ export declare class MessagingClient implements DropOnAirClient {
     startGroupScreenShare(callId: string, groupId: string, payload?: string): void;
     stopGroupScreenShare(callId: string, groupId: string, payload?: string): void;
     onGroupCallEvent(callback: GroupCallEventCallback): () => void;
+    transferHost(callId: string, groupId: string, newHostUserId: string): void;
+    appointCoHost(callId: string, groupId: string, userId: string): void;
+    revokeCoHost(callId: string, groupId: string, userId: string): void;
+    muteParticipant(callId: string, groupId: string, targetUserId: string): void;
+    removeParticipant(callId: string, groupId: string, targetUserId: string): void;
+    requestWaitingRoomEntry(callId: string, groupId: string): void;
+    admitFromWaitingRoom(callId: string, groupId: string, userId: string): void;
+    rejectFromWaitingRoom(callId: string, groupId: string, userId: string): void;
     private sendGroupCallFrame;
     /**
      * Initiate an outgoing call.

package/dist/core/messaging-client.js

@@ -254,7 +254,7 @@ class MessagingClient {
             logError: (stage, data) => this.logError(stage, data),
         });
     }
-    // Attachment API (phase1/attachments, PROTOCOL_VERSION 4+)
+    // Attachment API (PROTOCOL_VERSION 4+)
     async prepareAttachmentAndUpload(bytes, options) {
         return this.attachmentClient.prepareAttachmentAndUpload(bytes, options);
     }
@@ -762,6 +762,81 @@ class MessagingClient {
         this.groupCallListeners.add(callback);
         return () => this.groupCallListeners.delete(callback);
     }
+    // Group call moderation + waiting room. The server validates host/co-host
+    // authority and the `featuresEnabled.moderation` plan flag; on denial it
+    // emits a LIMIT_REACHED event with reason="MODERATION_NOT_ENABLED".
+    transferHost(callId, groupId, newHostUserId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_HOST_TRANSFER',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: JSON.stringify({ userId: newHostUserId }),
+        });
+    }
+    appointCoHost(callId, groupId, userId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_COHOST_APPOINT',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: JSON.stringify({ userId }),
+        });
+    }
+    revokeCoHost(callId, groupId, userId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_COHOST_REVOKE',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: JSON.stringify({ userId }),
+        });
+    }
+    muteParticipant(callId, groupId, targetUserId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_MUTE_PARTICIPANT',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: JSON.stringify({ targetUserId }),
+        });
+    }
+    removeParticipant(callId, groupId, targetUserId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_REMOVE_PARTICIPANT',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: JSON.stringify({ targetUserId }),
+        });
+    }
+    requestWaitingRoomEntry(callId, groupId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_WAITING_ROOM_REQUEST',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: '',
+        });
+    }
+    admitFromWaitingRoom(callId, groupId, userId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_WAITING_ROOM_ADMIT',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: JSON.stringify({ userId }),
+        });
+    }
+    rejectFromWaitingRoom(callId, groupId, userId) {
+        this.sendGroupCallFrame({
+            type: 'GROUP_CALL_WAITING_ROOM_REJECT',
+            callId,
+            groupId,
+            targetUserId: '',
+            payload: JSON.stringify({ userId }),
+        });
+    }
     sendGroupCallFrame(frame) {
         if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
             throw new Error('DropOnAir websocket is not connected');

package/dist/core/types.d.ts

@@ -11,7 +11,7 @@ export interface DecryptedMessage {
     timestamp: number;
     plaintext: string;
     /**
-     * Attachment pointers (phase1/attachments, PROTOCOL_VERSION 4+).
+     * Attachment pointers (PROTOCOL_VERSION 4+).
      * Empty/undefined for messages with no attachments. To fetch and decrypt the
      * bytes, call {@code client.downloadAttachment(ref)}.
      */
@@ -92,7 +92,7 @@ export interface DecryptedGroupMessage {
     plaintext: string;
 }
 export type GroupMessageCallback = (message: DecryptedGroupMessage) => void;
-export type GroupCallEventType = 'GROUP_CALL_INVITE' | 'GROUP_CALL_RINGING' | 'GROUP_CALL_JOIN' | 'GROUP_CALL_LEAVE' | 'GROUP_CALL_END' | 'GROUP_CALL_ENDED' | 'GROUP_CALL_PARTICIPANT_JOINED' | 'GROUP_CALL_PARTICIPANT_LEFT' | 'GROUP_CALL_ALREADY_ACTIVE' | 'GROUP_CALL_SDP_OFFER' | 'GROUP_CALL_SDP_ANSWER' | 'GROUP_CALL_ICE_CANDIDATE' | 'GROUP_CALL_SCREEN_SHARE_STARTED' | 'GROUP_CALL_SCREEN_SHARE_STOPPED';
+export type GroupCallEventType = 'GROUP_CALL_INVITE' | 'GROUP_CALL_RINGING' | 'GROUP_CALL_JOIN' | 'GROUP_CALL_LEAVE' | 'GROUP_CALL_END' | 'GROUP_CALL_ENDED' | 'GROUP_CALL_PARTICIPANT_JOINED' | 'GROUP_CALL_PARTICIPANT_LEFT' | 'GROUP_CALL_PARTICIPANT_REMOVED' | 'GROUP_CALL_ALREADY_ACTIVE' | 'GROUP_CALL_SDP_OFFER' | 'GROUP_CALL_SDP_ANSWER' | 'GROUP_CALL_ICE_CANDIDATE' | 'GROUP_CALL_SCREEN_SHARE_STARTED' | 'GROUP_CALL_SCREEN_SHARE_STOPPED' | 'GROUP_CALL_HOST_TRANSFER' | 'GROUP_CALL_COHOST_APPOINT' | 'GROUP_CALL_COHOST_REVOKE' | 'GROUP_CALL_ROLE_CHANGED' | 'GROUP_CALL_MUTE_PARTICIPANT' | 'GROUP_CALL_REMOVE_PARTICIPANT' | 'GROUP_CALL_WAITING_ROOM_REQUEST' | 'GROUP_CALL_WAITING_ROOM_JOINED' | 'GROUP_CALL_WAITING_ROOM_ADMIT' | 'GROUP_CALL_WAITING_ROOM_ADMITTED' | 'GROUP_CALL_WAITING_ROOM_REJECT' | 'GROUP_CALL_WAITING_ROOM_REJECTED';
 export interface GroupCallEvent {
     type: GroupCallEventType | string;
     callId: string;
@@ -214,7 +214,7 @@ export interface DropOnAirClient {
     sendCallSignal(type: 'CALL_SDP_OFFER' | 'CALL_SDP_ANSWER' | 'CALL_ICE_CANDIDATE', callId: string, payload: string): void;
     /**
      * Signal that this user started sharing their screen in a 1:1 call
-     * (phase1/screen-sharing, PROTOCOL_VERSION 4+). The actual screen MediaStreamTrack
+     * (PROTOCOL_VERSION 4+). The actual screen MediaStreamTrack
      * is added to the existing peer connection by the application; the SDK only
      * broadcasts the start/stop notification so the remote SDK can update its UI.
      * Optional `payload` (JSON string) can carry track-id or app-specific metadata.
@@ -266,4 +266,20 @@ export interface DropOnAirClient {
     stopGroupScreenShare(callId: string, groupId: string, payload?: string): void;
     /** Register a listener for group call events. Returns an unsubscribe function. */
     onGroupCallEvent(callback: GroupCallEventCallback): () => void;
+    /** Transfer host to another participant (current host only). */
+    transferHost(callId: string, groupId: string, newHostUserId: string): void;
+    /** Appoint a participant as co-host (host only). */
+    appointCoHost(callId: string, groupId: string, userId: string): void;
+    /** Revoke a participant's co-host status (host only). */
+    revokeCoHost(callId: string, groupId: string, userId: string): void;
+    /** Mute a participant's mic (host / co-host). Signaling hint; the target SDK applies it locally. */
+    muteParticipant(callId: string, groupId: string, targetUserId: string): void;
+    /** Remove a participant from the call (host / co-host). Server-enforced. */
+    removeParticipant(callId: string, groupId: string, targetUserId: string): void;
+    /** Request entry into a call's waiting room. Sent by would-be joiners; host receives WAITING_ROOM_JOINED. */
+    requestWaitingRoomEntry(callId: string, groupId: string): void;
+    /** Admit a user from the waiting room (host / co-host). */
+    admitFromWaitingRoom(callId: string, groupId: string, userId: string): void;
+    /** Reject a user waiting to join (host / co-host). */
+    rejectFromWaitingRoom(callId: string, groupId: string, userId: string): void;
 }

package/dist/version.d.ts

@@ -7,7 +7,7 @@
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-export declare const SDK_VERSION = "0.6.0";
+export declare const SDK_VERSION = "0.7.0";
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/dist/version.js

@@ -10,7 +10,7 @@ exports.PROTOCOL_VERSION = exports.PAYLOAD_FORMAT_VERSION = exports.SDK_VERSION
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-exports.SDK_VERSION = '0.6.0';
+exports.SDK_VERSION = '0.7.0';
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@droponair/sdk-js",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "DropOnAir SDK for end-to-end encrypted messaging",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",