@ethora/chat-component-rn 26.7.10 → 26.8.1

package/lib/module/hooks/useFileToken.js

@@ -1,5 +0,0 @@
-"use strict";
-
-import { useSelector } from 'react-redux';
-export const useFileToken = () => useSelector(state => state.chatSettingStore.user?.fileToken || '');
-//# sourceMappingURL=useFileToken.js.map

package/lib/module/hooks/useFileToken.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["useSelector","useFileToken","state","chatSettingStore","user","fileToken"],"sourceRoot":"../../../src","sources":["hooks/useFileToken.ts"],"mappings":";;AAAA,SAASA,WAAW,QAAQ,aAAa;AAGzC,OAAO,MAAMC,YAAY,GAAGA,CAAA,KAC1BD,WAAW,CACRE,KAAgB,IAAKA,KAAK,CAACC,gBAAgB,CAACC,IAAI,EAAEC,SAAS,IAAI,EAClE,CAAC","ignoreList":[]}

package/lib/module/networking/authRefresh.js

@@ -1,321 +0,0 @@
-"use strict";
-
-import http from './apiClient';
-import { store } from '../roomStore';
-import { refreshTokens } from '../roomStore/chatSettingsSlice';
-import { secureUserStorage } from '../helpers/secureUserStorage';
-import { pushLog } from '../utils/devLogger';
-
-/**
- * THE single refresh-token rotation point for the SDK.
- *
- * The backend now runs refresh-token ROTATION with REUSE DETECTION:
- * every successful `/users/login/refresh` burns the presented refresh
- * token and issues a new one. Presenting an already-rotated token is
- * indistinguishable, server-side, from a stolen token — so it is
- * treated as theft and (once the backend leaves monitor mode and
- * enables enforcing mode) kills the whole token family.
- *
- * That puts three hard obligations on the client:
- *
- *   1. Persist the NEW refreshToken from every response, immediately,
- *      before any other logic can throw and drop it on the floor.
- *   2. Never rotate concurrently. Two parallel refreshes both start
- *      from the same token; the loser presents a burned one and looks
- *      like an attacker. React Native is single-process, so a shared
- *      in-flight promise is the whole lock — no Web Locks needed (the
- *      web build of this component does need them, see its own
- *      `authRefresh.ts`).
- *   3. Route EVERY refresh path through here. One "side" refresh
- *      elsewhere in the codebase breaks the scheme for everyone.
- *
- * Callers must also stop treating 401 as "log out". Two of the four
- * refresh error codes are race signals, not auth failures — see
- * `RefreshErrorCode` below and `RefreshFatalError`.
- */
-
-/**
- * Thrown when the session is genuinely dead and the caller must do a
- * hard logout (clear storage, drop XMPP, send the user to login).
- *
- * Anything else this module rejects with — network errors, 5xx, an
- * unrecognised 401 — is NOT fatal and must NOT trigger a logout.
- */
-export class RefreshFatalError extends Error {
-  constructor(code, message) {
-    super(message || `Refresh failed: ${code}`);
-    this.name = 'RefreshFatalError';
-    this.code = code;
-    // Required for `instanceof` to survive TS's ES5 class-extends-builtin
-    // downlevelling, which RN's babel preset still applies.
-    Object.setPrototypeOf(this, RefreshFatalError.prototype);
-  }
-}
-export const isRefreshFatalError = error => error instanceof RefreshFatalError || error?.name === 'RefreshFatalError';
-const REFRESH_ENDPOINT = '/v1/users/login/refresh';
-
-/** `REFRESH_IN_PROGRESS` retry budget, per backend guidance (~300ms x 2-3). */
-const IN_PROGRESS_MAX_ATTEMPTS = 3;
-const IN_PROGRESS_BASE_DELAY_MS = 300;
-/**
- * Jitter matters: after a network blip every client in the app retries
- * on the same schedule and would hammer the rotation mutex in lockstep.
- */
-const IN_PROGRESS_JITTER_MS = 150;
-const KNOWN_CODES = ['REFRESH_IN_PROGRESS', 'REFRESH_TOKEN_ALREADY_ROTATED', 'REFRESH_TOKEN_REUSE_DETECTED', 'REFRESH_TOKEN_NOT_FOUND'];
-const sleep = ms => new Promise(resolve => setTimeout(resolve, ms));
-const inProgressDelay = attempt => IN_PROGRESS_BASE_DELAY_MS * attempt + Math.floor(Math.random() * IN_PROGRESS_JITTER_MS);
-
-/**
- * All four codes come back as HTTP 401, so the status alone tells us
- * nothing — the code in the body is the only signal.
- *
- * TODO(backend-confirm): the exact location of `code` in the payload is
- * not documented yet. Until it is, probe every shape the API uses
- * elsewhere and take the first hit. Once confirmed, collapse this to
- * the single real path.
- */
-export const parseRefreshErrorCode = error => {
-  const response = error?.response;
-  if (!response) {
-    return null;
-  }
-  const data = response.data;
-  const candidates = [data?.code, data?.error?.code, data?.errors?.[0]?.code, data?.error, data?.message, response.headers?.['x-error-code']];
-  for (const candidate of candidates) {
-    if (typeof candidate !== 'string') {
-      continue;
-    }
-    const match = KNOWN_CODES.find(code => candidate.includes(code));
-    if (match) {
-      return match;
-    }
-  }
-  return null;
-};
-const getStoreUser = () => store.getState().chatSettingStore?.user || {};
-
-/**
- * The refresh token as of RIGHT NOW. Read at the moment of use, never
- * captured ahead of time — that is the single-process equivalent of the
- * web build's "re-read inside the lock".
- *
- * Redux is the source of truth in RN (one process, one store);
- * AsyncStorage is only consulted as a cold-start fallback, before
- * `resolveInitBeforeLoadUser` has hydrated the store.
- */
-const readCurrentRefreshToken = async () => {
-  const fromStore = getStoreUser().refreshToken;
-  if (fromStore) {
-    return fromStore;
-  }
-  const stored = await secureUserStorage().get();
-  return stored?.refreshToken || '';
-};
-
-/**
- * Persist BEFORE resolving. The dispatch updates redux (and, until
- * phase 6 lands, fires its own best-effort AsyncStorage write); the
- * awaited write below is the one that actually guarantees the rotated
- * token survives the app being killed a moment later. Losing it means
- * the next launch presents a burned token — i.e. looks like theft.
- */
-const persistTokens = async result => {
-  store.dispatch(refreshTokens({
-    token: result.token,
-    refreshToken: result.refreshToken,
-    xmppPassword: result.xmppPassword,
-    fileToken: result.fileToken
-  }));
-  try {
-    // Write the post-dispatch snapshot rather than a read-modify-write
-    // merge, so this can't race the reducer's own write back to a
-    // stale copy of the surrounding user fields.
-    await secureUserStorage().set(store.getState().chatSettingStore.user);
-  } catch (error) {
-    pushLog('warn', 'authRefresh: failed to persist rotated tokens', error);
-  }
-};
-
-/**
- * A rotation that happened somewhere we didn't drive — currently only
- * reachable via the ALREADY_ROTATED recovery path, kept separate so the
- * web build and this one stay structurally identical.
- */
-const adoptStoredTokens = async () => {
-  const stored = await secureUserStorage().get();
-  if (!stored?.refreshToken || !stored?.token) {
-    return null;
-  }
-  const user = getStoreUser();
-  if (user.refreshToken !== stored.refreshToken) {
-    store.dispatch(refreshTokens({
-      token: stored.token,
-      refreshToken: stored.refreshToken
-    }));
-  }
-  return {
-    token: stored.token,
-    refreshToken: stored.refreshToken,
-    xmppPassword: stored.xmppPassword,
-    fileToken: stored.fileToken
-  };
-};
-
-/** Host-supplied rotation, mirrors `IConfig['refreshTokens']['refreshFunction']`. */
-
-const runConsumerRefresh = async refreshFunction => {
-  const refreshed = await refreshFunction();
-  if (!refreshed?.accessToken) {
-    throw new Error('Custom refresh function did not return an access token');
-  }
-  if (!refreshed.refreshToken) {
-    // Not fatal — some hosts still run non-rotating backends — but on a
-    // rotating one this silently keeps a burned token around, which is
-    // exactly the failure the new scheme punishes.
-    pushLog('warn', 'authRefresh: custom refreshFunction returned no refreshToken; ' + 'keeping the existing one. On a rotating backend this will be ' + 'seen as token reuse.');
-  }
-  const result = {
-    token: refreshed.accessToken,
-    refreshToken: refreshed.refreshToken || (await readCurrentRefreshToken()) || '',
-    xmppPassword: refreshed.xmppPassword,
-    fileToken: refreshed.fileToken
-  };
-  await persistTokens(result);
-  return result;
-};
-const requestRotation = async refreshToken => {
-  const response = await http.post(REFRESH_ENDPOINT, {}, {
-    headers: {
-      Authorization: refreshToken
-    }
-  });
-  const result = {
-    token: response?.data?.token || '',
-    refreshToken: response?.data?.refreshToken || '',
-    wsToken: response?.data?.wsToken,
-    xmppPassword: response?.data?.xmppPassword,
-    fileToken: response?.data?.fileToken
-  };
-  if (!result.token || !result.refreshToken) {
-    throw new Error('Refresh response did not contain both tokens');
-  }
-
-  // Persist first, resolve second. Every early return between here and
-  // the caller is a chance to lose the rotation.
-  await persistTokens(result);
-  return result;
-};
-const performRefresh = async overrideToken => {
-  const consumerRefresh = store.getState().chatSettingStore?.config?.refreshTokens?.refreshFunction;
-  if (consumerRefresh) {
-    // A configured host function wins unconditionally — including over
-    // an explicit bootstrap token. Hosts that embed this SDK often own
-    // the Ethora refresh token themselves (their own storage, their own
-    // rotation) and only hand us a copy; rotating it here would burn
-    // THEIR token behind their back and leave them holding a dead one.
-    //
-    // It still has to be serialised — it hits the same backend mutex —
-    // hence running it inside the shared in-flight promise.
-    return runConsumerRefresh(consumerRefresh);
-  }
-  for (let attempt = 1; attempt <= IN_PROGRESS_MAX_ATTEMPTS; attempt++) {
-    const refreshToken = overrideToken || (await readCurrentRefreshToken());
-    if (!refreshToken) {
-      // Deliberately NOT fatal: a missing token mid-bootstrap must not
-      // nuke a session that is still being hydrated.
-      throw new Error('Refresh token is missing');
-    }
-    try {
-      return await requestRotation(refreshToken);
-    } catch (error) {
-      const code = parseRefreshErrorCode(error);
-      if (code === 'REFRESH_IN_PROGRESS') {
-        if (attempt < IN_PROGRESS_MAX_ATTEMPTS) {
-          await sleep(inProgressDelay(attempt));
-          continue;
-        }
-        // Budget spent. Whoever holds the mutex has very likely
-        // finished and written a newer token — take it if so. Skipped
-        // for an explicit token: it may belong to a different session
-        // than whatever is currently in storage.
-        const adopted = overrideToken ? null : await adoptStoredTokens();
-        if (adopted && adopted.refreshToken !== refreshToken) {
-          return adopted;
-        }
-        throw error;
-      }
-      if (code === 'REFRESH_TOKEN_ALREADY_ROTATED') {
-        // Our copy is stale. If something already wrote a newer token,
-        // this is a benign race — use it. Otherwise the session really
-        // is unrecoverable.
-        const adopted = overrideToken ? null : await adoptStoredTokens();
-        if (adopted && adopted.refreshToken !== refreshToken) {
-          return adopted;
-        }
-        throw new RefreshFatalError(code);
-      }
-      if (code === 'REFRESH_TOKEN_REUSE_DETECTED' || code === 'REFRESH_TOKEN_NOT_FOUND') {
-        throw new RefreshFatalError(code);
-      }
-
-      // Network error, 5xx, plain 401 without a code — pass through
-      // untouched. The caller must not log out on these.
-      throw error;
-    }
-  }
-
-  // Unreachable: the loop either returns or throws.
-  throw new Error('Refresh attempts exhausted');
-};
-let inflight = null;
-let lastRotationAt = 0;
-const QUIET_ROTATION_MIN_INTERVAL_MS = 5 * 60 * 1000;
-
-/**
- * Rotate the tokens. Concurrent callers share ONE request — this is the
- * lock the new backend scheme requires.
- *
- * Rejects with `RefreshFatalError` when the session is dead (caller
- * should hard-logout) and with a plain error otherwise (caller should
- * surface the failure and leave the session alone).
- */
-export function refreshAuthTokens(options) {
-  if (inflight) {
-    // Whatever that rotation produces is at least as fresh as anything
-    // this caller could have asked for.
-    return inflight;
-  }
-  inflight = performRefresh(options?.refreshToken).then(result => {
-    lastRotationAt = Date.now();
-    return result;
-  }).finally(() => {
-    inflight = null;
-  });
-  return inflight;
-}
-
-/**
- * Fire-and-forget variant for call sites that only want "make sure the
- * tokens are fresh" and have no meaningful error handling — chat
- * bootstrap, XMPP reconnect. Never rejects.
- */
-
-export async function refreshAuthTokensQuietly(options) {
-  if (!options?.force && Date.now() - lastRotationAt < QUIET_ROTATION_MIN_INTERVAL_MS) {
-    return null;
-  }
-  try {
-    return await refreshAuthTokens();
-  } catch (error) {
-    pushLog(isRefreshFatalError(error) ? 'error' : 'warn', 'authRefresh: background refresh failed', error);
-    return null;
-  }
-}
-
-/** Test seam — drops any shared in-flight promise between cases. */
-export function __resetAuthRefreshStateForTests() {
-  inflight = null;
-  lastRotationAt = 0;
-}
-//# sourceMappingURL=authRefresh.js.map

package/lib/module/networking/authRefresh.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["http","store","refreshTokens","secureUserStorage","pushLog","RefreshFatalError","Error","constructor","code","message","name","Object","setPrototypeOf","prototype","isRefreshFatalError","error","REFRESH_ENDPOINT","IN_PROGRESS_MAX_ATTEMPTS","IN_PROGRESS_BASE_DELAY_MS","IN_PROGRESS_JITTER_MS","KNOWN_CODES","sleep","ms","Promise","resolve","setTimeout","inProgressDelay","attempt","Math","floor","random","parseRefreshErrorCode","response","data","candidates","errors","headers","candidate","match","find","includes","getStoreUser","getState","chatSettingStore","user","readCurrentRefreshToken","fromStore","refreshToken","stored","get","persistTokens","result","dispatch","token","xmppPassword","fileToken","set","adoptStoredTokens","runConsumerRefresh","refreshFunction","refreshed","accessToken","requestRotation","post","Authorization","wsToken","performRefresh","overrideToken","consumerRefresh","config","adopted","inflight","lastRotationAt","QUIET_ROTATION_MIN_INTERVAL_MS","refreshAuthTokens","options","then","Date","now","finally","refreshAuthTokensQuietly","force","__resetAuthRefreshStateForTests"],"sourceRoot":"../../../src","sources":["networking/authRefresh.ts"],"mappings":";;AAAA,OAAOA,IAAI,MAAM,aAAa;AAC9B,SAASC,KAAK,QAAQ,cAAc;AACpC,SAASC,aAAa,QAAQ,gCAAgC;AAC9D,SAASC,iBAAiB,QAAQ,8BAA8B;AAChE,SAASC,OAAO,QAAQ,oBAAoB;;AAG5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAsBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,SAASC,KAAK,CAAC;EAG3CC,WAAWA,CAACC,IAAsB,EAAEC,OAAgB,EAAE;IACpD,KAAK,CAACA,OAAO,IAAI,mBAAmBD,IAAI,EAAE,CAAC;IAC3C,IAAI,CAACE,IAAI,GAAG,mBAAmB;IAC/B,IAAI,CAACF,IAAI,GAAGA,IAAI;IAChB;IACA;IACAG,MAAM,CAACC,cAAc,CAAC,IAAI,EAAEP,iBAAiB,CAACQ,SAAS,CAAC;EAC1D;AACF;AAEA,OAAO,MAAMC,mBAAmB,GAC9BC,KAAc,IAEdA,KAAK,YAAYV,iBAAiB,IACjCU,KAAK,EAAwBL,IAAI,KAAK,mBAAmB;AAE5D,MAAMM,gBAAgB,GAAG,yBAAyB;;AAElD;AACA,MAAMC,wBAAwB,GAAG,CAAC;AAClC,MAAMC,yBAAyB,GAAG,GAAG;AACrC;AACA;AACA;AACA;AACA,MAAMC,qBAAqB,GAAG,GAAG;AAEjC,MAAMC,WAA+B,GAAG,CACtC,qBAAqB,EACrB,+BAA+B,EAC/B,8BAA8B,EAC9B,yBAAyB,CAC1B;AAED,MAAMC,KAAK,GAAIC,EAAU,IACvB,IAAIC,OAAO,CAAQC,OAAO,IAAKC,UAAU,CAACD,OAAO,EAAEF,EAAE,CAAC,CAAC;AAEzD,MAAMI,eAAe,GAAIC,OAAe,IACtCT,yBAAyB,GAAGS,OAAO,GACnCC,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,CAAC,CAAC,GAAGX,qBAAqB,CAAC;;AAEnD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMY,qBAAqB,GAChChB,KAAc,IACc;EAC5B,MAAMiB,QAAQ,GAAIjB,KAAK,EAAUiB,QAAQ;EACzC,IAAI,CAACA,QAAQ,EAAE;IACb,OAAO,IAAI;EACb;EAEA,MAAMC,IAAI,GAAGD,QAAQ,CAACC,IAAI;EAC1B,MAAMC,UAAU,GAAG,CACjBD,IAAI,EAAEzB,IAAI,EACVyB,IAAI,EAAElB,KAAK,EAAEP,IAAI,EACjByB,IAAI,EAAEE,MAAM,GAAG,CAAC,CAAC,EAAE3B,IAAI,EACvByB,IAAI,EAAElB,KAAK,EACXkB,IAAI,EAAExB,OAAO,EACbuB,QAAQ,CAACI,OAAO,GAAG,cAAc,CAAC,CACnC;EAED,KAAK,MAAMC,SAAS,IAAIH,UAAU,EAAE;IAClC,IAAI,OAAOG,SAAS,KAAK,QAAQ,EAAE;MACjC;IACF;IACA,MAAMC,KAAK,GAAGlB,WAAW,CAACmB,IAAI,CAAE/B,IAAI,IAAK6B,SAAS,CAACG,QAAQ,CAAChC,IAAI,CAAC,CAAC;IAClE,IAAI8B,KAAK,EAAE;MACT,OAAOA,KAAK;IACd;EACF;EAEA,OAAO,IAAI;AACb,CAAC;AAED,MAAMG,YAAY,GAAGA,CAAA,KAClBxC,KAAK,CAACyC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAEC,IAAI,IAAsB,CAAC,CAAC;;AAElE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,uBAAuB,GAAG,MAAAA,CAAA,KAA6B;EAC3D,MAAMC,SAAS,GAAGL,YAAY,CAAC,CAAC,CAACM,YAAY;EAC7C,IAAID,SAAS,EAAE;IACb,OAAOA,SAAS;EAClB;EAEA,MAAME,MAAM,GAAG,MAAM7C,iBAAiB,CAAC,CAAC,CAAC8C,GAAG,CAAC,CAAC;EAC9C,OAAOD,MAAM,EAAED,YAAY,IAAI,EAAE;AACnC,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMG,aAAa,GAAG,MAAOC,MAAqB,IAAoB;EACpElD,KAAK,CAACmD,QAAQ,CACZlD,aAAa,CAAC;IACZmD,KAAK,EAAEF,MAAM,CAACE,KAAK;IACnBN,YAAY,EAAEI,MAAM,CAACJ,YAAY;IACjCO,YAAY,EAAEH,MAAM,CAACG,YAAY;IACjCC,SAAS,EAAEJ,MAAM,CAACI;EACpB,CAAC,CACH,CAAC;EAED,IAAI;IACF;IACA;IACA;IACA,MAAMpD,iBAAiB,CAAC,CAAC,CAACqD,GAAG,CAC3BvD,KAAK,CAACyC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,CAACC,IACpC,CAAC;EACH,CAAC,CAAC,OAAO7B,KAAK,EAAE;IACdX,OAAO,CAAC,MAAM,EAAE,+CAA+C,EAAEW,KAAK,CAAC;EACzE;AACF,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,MAAM0C,iBAAiB,GAAG,MAAAA,CAAA,KAA2C;EACnE,MAAMT,MAAM,GAAG,MAAM7C,iBAAiB,CAAC,CAAC,CAAC8C,GAAG,CAAC,CAAC;EAC9C,IAAI,CAACD,MAAM,EAAED,YAAY,IAAI,CAACC,MAAM,EAAEK,KAAK,EAAE;IAC3C,OAAO,IAAI;EACb;EAEA,MAAMT,IAAI,GAAGH,YAAY,CAAC,CAAC;EAC3B,IAAIG,IAAI,CAACG,YAAY,KAAKC,MAAM,CAACD,YAAY,EAAE;IAC7C9C,KAAK,CAACmD,QAAQ,CACZlD,aAAa,CAAC;MACZmD,KAAK,EAAEL,MAAM,CAACK,KAAK;MACnBN,YAAY,EAAEC,MAAM,CAACD;IACvB,CAAC,CACH,CAAC;EACH;EAEA,OAAO;IACLM,KAAK,EAAEL,MAAM,CAACK,KAAK;IACnBN,YAAY,EAAEC,MAAM,CAACD,YAAY;IACjCO,YAAY,EAAEN,MAAM,CAACM,YAAY;IACjCC,SAAS,EAAEP,MAAM,CAACO;EACpB,CAAC;AACH,CAAC;;AAED;;AAQA,MAAMG,kBAAkB,GAAG,MACzBC,eAAkC,IACP;EAC3B,MAAMC,SAAS,GAAG,MAAMD,eAAe,CAAC,CAAC;EAEzC,IAAI,CAACC,SAAS,EAAEC,WAAW,EAAE;IAC3B,MAAM,IAAIvD,KAAK,CAAC,wDAAwD,CAAC;EAC3E;EAEA,IAAI,CAACsD,SAAS,CAACb,YAAY,EAAE;IAC3B;IACA;IACA;IACA3C,OAAO,CACL,MAAM,EACN,gEAAgE,GAC9D,+DAA+D,GAC/D,sBACJ,CAAC;EACH;EAEA,MAAM+C,MAAqB,GAAG;IAC5BE,KAAK,EAAEO,SAAS,CAACC,WAAW;IAC5Bd,YAAY,EACVa,SAAS,CAACb,YAAY,KAAK,MAAMF,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE;IACnES,YAAY,EAAEM,SAAS,CAACN,YAAY;IACpCC,SAAS,EAAEK,SAAS,CAACL;EACvB,CAAC;EAED,MAAML,aAAa,CAACC,MAAM,CAAC;EAC3B,OAAOA,MAAM;AACf,CAAC;AAED,MAAMW,eAAe,GAAG,MACtBf,YAAoB,IACO;EAC3B,MAAMf,QAAQ,GAAG,MAAMhC,IAAI,CAAC+D,IAAI,CAC9B/C,gBAAgB,EAChB,CAAC,CAAC,EACF;IAAEoB,OAAO,EAAE;MAAE4B,aAAa,EAAEjB;IAAa;EAAE,CAC7C,CAAC;EAED,MAAMI,MAAqB,GAAG;IAC5BE,KAAK,EAAErB,QAAQ,EAAEC,IAAI,EAAEoB,KAAK,IAAI,EAAE;IAClCN,YAAY,EAAEf,QAAQ,EAAEC,IAAI,EAAEc,YAAY,IAAI,EAAE;IAChDkB,OAAO,EAAEjC,QAAQ,EAAEC,IAAI,EAAEgC,OAAO;IAChCX,YAAY,EAAEtB,QAAQ,EAAEC,IAAI,EAAEqB,YAAY;IAC1CC,SAAS,EAAEvB,QAAQ,EAAEC,IAAI,EAAEsB;EAC7B,CAAC;EAED,IAAI,CAACJ,MAAM,CAACE,KAAK,IAAI,CAACF,MAAM,CAACJ,YAAY,EAAE;IACzC,MAAM,IAAIzC,KAAK,CAAC,8CAA8C,CAAC;EACjE;;EAEA;EACA;EACA,MAAM4C,aAAa,CAACC,MAAM,CAAC;EAC3B,OAAOA,MAAM;AACf,CAAC;AAED,MAAMe,cAAc,GAAG,MACrBC,aAAsB,IACK;EAC3B,MAAMC,eAAe,GACnBnE,KAAK,CAACyC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAE0B,MAAM,EAAEnE,aAAa,EAAEyD,eAAe;EAE3E,IAAIS,eAAe,EAAE;IACnB;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,OAAOV,kBAAkB,CAACU,eAAe,CAAC;EAC5C;EAEA,KAAK,IAAIzC,OAAO,GAAG,CAAC,EAAEA,OAAO,IAAIV,wBAAwB,EAAEU,OAAO,EAAE,EAAE;IACpE,MAAMoB,YAAY,GAAGoB,aAAa,KAAK,MAAMtB,uBAAuB,CAAC,CAAC,CAAC;IAEvE,IAAI,CAACE,YAAY,EAAE;MACjB;MACA;MACA,MAAM,IAAIzC,KAAK,CAAC,0BAA0B,CAAC;IAC7C;IAEA,IAAI;MACF,OAAO,MAAMwD,eAAe,CAACf,YAAY,CAAC;IAC5C,CAAC,CAAC,OAAOhC,KAAK,EAAE;MACd,MAAMP,IAAI,GAAGuB,qBAAqB,CAAChB,KAAK,CAAC;MAEzC,IAAIP,IAAI,KAAK,qBAAqB,EAAE;QAClC,IAAImB,OAAO,GAAGV,wBAAwB,EAAE;UACtC,MAAMI,KAAK,CAACK,eAAe,CAACC,OAAO,CAAC,CAAC;UACrC;QACF;QACA;QACA;QACA;QACA;QACA,MAAM2C,OAAO,GAAGH,aAAa,GAAG,IAAI,GAAG,MAAMV,iBAAiB,CAAC,CAAC;QAChE,IAAIa,OAAO,IAAIA,OAAO,CAACvB,YAAY,KAAKA,YAAY,EAAE;UACpD,OAAOuB,OAAO;QAChB;QACA,MAAMvD,KAAK;MACb;MAEA,IAAIP,IAAI,KAAK,+BAA+B,EAAE;QAC5C;QACA;QACA;QACA,MAAM8D,OAAO,GAAGH,aAAa,GAAG,IAAI,GAAG,MAAMV,iBAAiB,CAAC,CAAC;QAChE,IAAIa,OAAO,IAAIA,OAAO,CAACvB,YAAY,KAAKA,YAAY,EAAE;UACpD,OAAOuB,OAAO;QAChB;QACA,MAAM,IAAIjE,iBAAiB,CAACG,IAAI,CAAC;MACnC;MAEA,IACEA,IAAI,KAAK,8BAA8B,IACvCA,IAAI,KAAK,yBAAyB,EAClC;QACA,MAAM,IAAIH,iBAAiB,CAACG,IAAI,CAAC;MACnC;;MAEA;MACA;MACA,MAAMO,KAAK;IACb;EACF;;EAEA;EACA,MAAM,IAAIT,KAAK,CAAC,4BAA4B,CAAC;AAC/C,CAAC;AAcD,IAAIiE,QAAuC,GAAG,IAAI;AAElD,IAAIC,cAAc,GAAG,CAAC;AACtB,MAAMC,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;;AAEpD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAC/BC,OAAwB,EACA;EACxB,IAAIJ,QAAQ,EAAE;IACZ;IACA;IACA,OAAOA,QAAQ;EACjB;EAEAA,QAAQ,GAAGL,cAAc,CAACS,OAAO,EAAE5B,YAAY,CAAC,CAC7C6B,IAAI,CAAEzB,MAAM,IAAK;IAChBqB,cAAc,GAAGK,IAAI,CAACC,GAAG,CAAC,CAAC;IAC3B,OAAO3B,MAAM;EACf,CAAC,CAAC,CACD4B,OAAO,CAAC,MAAM;IACbR,QAAQ,GAAG,IAAI;EACjB,CAAC,CAAC;EAEJ,OAAOA,QAAQ;AACjB;;AAEA;AACA;AACA;AACA;AACA;;AAKA,OAAO,eAAeS,wBAAwBA,CAC5CL,OAA6B,EACE;EAC/B,IACE,CAACA,OAAO,EAAEM,KAAK,IACfJ,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGN,cAAc,GAAGC,8BAA8B,EAC5D;IACA,OAAO,IAAI;EACb;EACA,IAAI;IACF,OAAO,MAAMC,iBAAiB,CAAC,CAAC;EAClC,CAAC,CAAC,OAAO3D,KAAK,EAAE;IACdX,OAAO,CACLU,mBAAmB,CAACC,KAAK,CAAC,GAAG,OAAO,GAAG,MAAM,EAC7C,wCAAwC,EACxCA,KACF,CAAC;IACD,OAAO,IAAI;EACb;AACF;;AAEA;AACA,OAAO,SAASmE,+BAA+BA,CAAA,EAAS;EACtDX,QAAQ,GAAG,IAAI;EACfC,cAAc,GAAG,CAAC;AACpB","ignoreList":[]}

package/lib/typescript/components/Modals/ChatProfileModal/ReportChatModal.d.ts

@@ -1,9 +0,0 @@
-/** @format */
-import React from 'react';
-interface ReportChatModalProps {
-    visible: boolean;
-    onClose: () => void;
-}
-declare const ReportChatModal: React.FC<ReportChatModalProps>;
-export default ReportChatModal;
-//# sourceMappingURL=ReportChatModal.d.ts.map

package/lib/typescript/components/Modals/ChatProfileModal/ReportChatModal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ReportChatModal.d.ts","sourceRoot":"","sources":["../../../../../src/components/Modals/ChatProfileModal/ReportChatModal.tsx"],"names":[],"mappings":"AAAA,cAAc;AAEd,OAAO,KAAmB,MAAM,OAAO,CAAC;AAiCxC,UAAU,oBAAoB;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,QAAA,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CA+HnD,CAAC;AA4EF,eAAe,eAAe,CAAC"}

package/lib/typescript/components/Modals/ProfileHeader/ProfileHeader.d.ts

@@ -1,75 +0,0 @@
-/** @format */
-import React from 'react';
-import { Animated, StyleProp, TextStyle } from 'react-native';
-/** Height of the expanded photo hero. */
-export declare const HERO_HEIGHT = 320;
-/** Back / "…" row, directly below the status-bar inset. */
-export declare const TOP_BAR_BUTTONS = 60;
-/**
- * Avatar + name row underneath it, revealed as the header collapses.
- * Taller than the 48pt avatar it holds, so the row breathes: the extra
- * height splits evenly above and below (the row centres its content),
- * putting real space between the avatar and both the buttons above and
- * the content below.
- */
-export declare const TOP_BAR_NAME = 92;
-/** Content band of the collapsed bar, below the status-bar inset. */
-export declare const TOP_BAR_BAND: number;
-/** True when the frosted-glass layer is the real thing, not the dim. */
-export declare const hasNativeBlur: () => boolean;
-export interface HeroAction {
-    key: string;
-    label: string;
-    /** Rendered inside a circle tinted for the current background. */
-    icon: (color: string) => React.ReactNode;
-    onPress: () => void;
-}
-interface CommonProps {
-    title: string;
-    subtitle?: string;
-    imageUri?: string | null;
-    /** Background when the chat has no picture — one flat colour, no scrims. */
-    fallbackColor: string;
-    /** Two uppercase letters shown on that background. */
-    initials: string;
-    scrollY: Animated.Value;
-    /** Prefixes every testID, so each screen's tests address their own. */
-    testIDPrefix?: string;
-}
-/** Everything the screen needs to line its scroll content up with the bar. */
-export declare const useHeaderMetrics: () => {
-    insets: import("react-native-safe-area-context").EdgeInsets;
-    barHeight: number;
-    /** Scroll distance between the expanded hero and the collapsed bar. */
-    collapseDistance: number;
-};
-/**
- * The chat picture, blown up to a full-bleed hero with the name, member
- * count and the round action buttons on top of it.
- *
- * It lives INSIDE the ScrollView (rather than behind it) so the action
- * buttons stay tappable — an absolutely-positioned hero would sit under a
- * full-screen scroll surface that swallows every touch. Parallax is done
- * on the inner image instead: the wrapper keeps its layout height while
- * the picture drifts at ~⅓ of the scroll speed, and over-scrolling
- * upwards scales it up the way iOS profile headers do.
- */
-export declare const ProfileHero: React.FC<CommonProps & {
-    actions: HeroAction[];
-    /** Rendered to the right of the name (the profile's Leave button). */
-    titleAccessory?: React.ReactNode;
-    titleStyle?: StyleProp<TextStyle>;
-    subtitleStyle?: StyleProp<TextStyle>;
-}>;
-/**
- * The bar pinned over the hero: back button and the "…" menu are always
- * there, while the frosted picture, small avatar and name fade in as the
- * hero scrolls away — the collapsed state from the design's third screen.
- */
-export declare const ProfileTopBar: React.FC<CommonProps & {
-    onBack: () => void;
-    menu?: React.ReactNode;
-    titleStyle?: StyleProp<TextStyle>;
-}>;
-export {};
-//# sourceMappingURL=ProfileHeader.d.ts.map

package/lib/typescript/components/Modals/ProfileHeader/ProfileHeader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProfileHeader.d.ts","sourceRoot":"","sources":["../../../../../src/components/Modals/ProfileHeader/ProfileHeader.tsx"],"names":[],"mappings":"AAAA,cAAc;AAEd,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,QAAQ,EAER,SAAS,EAGT,SAAS,EAGV,MAAM,cAAc,CAAC;AAKtB,yCAAyC;AACzC,eAAO,MAAM,WAAW,MAAM,CAAC;AAC/B,2DAA2D;AAC3D,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,qEAAqE;AACrE,eAAO,MAAM,YAAY,QAAiC,CAAC;AAyC3D,wEAAwE;AACxE,eAAO,MAAM,aAAa,eAAmB,CAAC;AAyC9C,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC;IACzC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC;IACxB,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB;;;IAMzB,uEAAuE;;CAG1E,CAAC;AAYF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,EAAE,CAChC,WAAW,GAAG;IACZ,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,sEAAsE;IACtE,cAAc,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;CACtC,CAoKF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAClC,WAAW,GAAG;IACZ,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IACvB,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;CACnC,CAyGF,CAAC"}

package/lib/typescript/components/Modals/ProfileHeader/ProfileMenu.d.ts

@@ -1,25 +0,0 @@
-/** @format */
-import React from 'react';
-export interface ProfileMenuItem {
-    key: string;
-    label: string;
-    icon: React.ReactNode;
-    destructive?: boolean;
-    onPress: () => void;
-}
-/**
- * The "…" overflow menu shared by the chat and user profile screens.
- *
- * The shared `DropdownMenu` pins its card at a hard-coded `top: 95`, which
- * on this screen landed it over the host's own tab bar, unanchored to the
- * button. This one measures the button and grows the card out of it: the
- * card scales up from its top-right corner (translate → scale → translate
- * back, which is how you fake a transform-origin in React Native) so the
- * menu visibly unfolds from the three dots.
- */
-declare const ProfileMenu: React.FC<{
-    items: ProfileMenuItem[];
-    testIDPrefix?: string;
-}>;
-export default ProfileMenu;
-//# sourceMappingURL=ProfileMenu.d.ts.map

package/lib/typescript/components/Modals/ProfileHeader/ProfileMenu.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProfileMenu.d.ts","sourceRoot":"","sources":["../../../../../src/components/Modals/ProfileHeader/ProfileMenu.tsx"],"names":[],"mappings":"AAAA,cAAc;AAEd,OAAO,KAA2B,MAAM,OAAO,CAAC;AAchD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAUD;;;;;;;;;GASG;AACH,QAAA,MAAM,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;IAC1B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CA2HA,CAAC;AAgDF,eAAe,WAAW,CAAC"}

package/lib/typescript/helpers/getChatBackground.d.ts

@@ -1,15 +0,0 @@
-/** @format */
-import type { IConfig } from '../types/types';
-/** Ground behind the conversation, and behind the rounded corners of the
- * header and the composer that sit over it. */
-export declare const DEFAULT_CHAT_BACKGROUND = "#F3F6FC";
-/**
- * One place for the conversation's background colour.
- *
- * The message list has always painted it; the chat container behind it was
- * plain white, which is what made the header's rounded bottom corners and
- * the composer's rounded top corners invisible — the corners revealed the
- * white parent, not the conversation.
- */
-export declare const getChatBackgroundColor: (config?: IConfig) => string;
-//# sourceMappingURL=getChatBackground.d.ts.map

package/lib/typescript/helpers/getChatBackground.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getChatBackground.d.ts","sourceRoot":"","sources":["../../../src/helpers/getChatBackground.ts"],"names":[],"mappings":"AAAA,cAAc;AAEd,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C;+CAC+C;AAC/C,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GAAI,SAAS,OAAO,KAAG,MACA,CAAC"}

package/lib/typescript/helpers/getDisplayFileName.d.ts

@@ -1,49 +0,0 @@
-export interface DisplayFileNameOptions {
-    originalName?: string | null;
-    fileName?: string | null;
-    location?: string | null;
-    mimetype?: string | null;
-}
-/**
- * Picks the best human-readable filename for a chat attachment - the
- * single source of truth for every place a file name is rendered in the
- * UI, saved to disk, shared, or downloaded.
- *
- * Priority: `originalName` (the sender's own file name, e.g. "test1.pdf")
- * beats `fileName` (the server's stored/hashed name, e.g.
- * "3f9a1c...c2.pdf") beats the last path segment of `location`. The
- * stored hash name is only a fallback of last resort.
- *
- * Bug #40: display and save/share/download logic used to prefer the
- * stored hash name over the original one, so an attachment sent as
- * "test1.pdf" showed up (and got saved to the phone) as something like
- * "3f9a1c...c2.pdf" - both directions (web -> RN and RN -> RN).
- *
- * Always returns a non-empty string with a valid extension: if the
- * chosen candidate has no extension (a hash name can be `<hex>` with no
- * extension at all, or `<hex>.<ext>`), one is appended from `mimetype`
- * (or `.bin` as a last resort when the mime is unknown/missing too).
- */
-export declare function getDisplayFileName(options: DisplayFileNameOptions): string;
-/**
- * Makes a display name safe to use as an actual path segment when
- * saving/sharing a file to the device: strips path separators (so an
- * odd/hostile server-provided name can't escape the target directory)
- * and control characters. Keeps the rest of the name - including the
- * extension - intact.
- */
-export declare function sanitizeFileNameForPath(name: string): string;
-/**
- * Resolves a filename that is safe to write into a target directory:
- * sanitizes it, then - if `exists` reports a collision - inserts
- * " (1)", " (2)", ... before the extension until a free name is found,
- * so saving two different attachments that share a display name never
- * silently overwrites the first one.
- *
- * `exists` is injected so callers can back it with whatever existence
- * check makes sense for their storage API (expo-file-system,
- * StorageAccessFramework directory listing, ...) - this function stays
- * pure and easy to unit test.
- */
-export declare function getUniqueFileName(name: string, exists: (candidateName: string) => Promise<boolean>): Promise<string>;
-//# sourceMappingURL=getDisplayFileName.d.ts.map

package/lib/typescript/helpers/getDisplayFileName.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getDisplayFileName.d.ts","sourceRoot":"","sources":["../../../src/helpers/getDisplayFileName.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAO1E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAClD,OAAO,CAAC,MAAM,CAAC,CAiBjB"}

package/lib/typescript/helpers/getServerReadTimestamp.d.ts

@@ -1,108 +0,0 @@
-import type { IMessage, IRoom } from '../types/types';
-export declare const FUTURE_READ_MARKER_TOLERANCE_MS: number;
-export interface ReadTimestampHeapState {
-    messageHeap?: IMessage[] | null;
-    failedMessages?: Record<string, unknown> | null;
-}
-type RoomForReadTimestamp = Pick<IRoom, 'jid' | 'messages' | 'lastViewedTimestamp'>;
-/**
- * Resolve the "read up to here" marker for `room` using SERVER time,
- * never the device clock.
- *
- * Bug #38: if the device clock is ahead when the user leaves a room, a
- * `Date.now()` read marker lands in the future. The private-store merge
- * (flushLastViewedToPrivateStore.ts) is forward-only ("if (prevNum >=
- * ts) continue"), so once a future marker is written, no later
- * *correct* write can ever replace it - the room's unread count is
- * stuck wrong forever, on every device, from that point on. Anchoring
- * to the newest SERVER-acknowledged message's own timestamp instead
- * means the marker we write can never be ahead of what the server
- * itself has recorded for the room.
- *
- * "Server-acknowledged" excludes:
- *  - a message still marked `pending` (the optimistic bubble shown
- *    while a send is in flight - it carries the DEVICE send time via
- *    `date`, not a server timestamp, until the server echoes it back
- *    and insertMessageWithDelimiter flips `pending` off);
- *  - a message id present in `heapState.messageHeap` (queued retry -
- *    used for offline media sends, see roomHeapSlice.ts) or
- *    `heapState.failedMessages` (a send that never reached the server
- *    at all).
- *
- * `msgSortableMs` (helpers/msgSortableMs.ts) reads the server-assigned microsecond
- * timestamp encoded in the first 13 digits of the message id - the same
- * source already used for message ordering and unread counting - so
- * this stays consistent with the rest of the read/unread pipeline.
- *
- * Falls back to the room's existing `lastViewedTimestamp` (so leaving
- * an empty or never-scrolled room doesn't regress the marker), then to
- * `0` when there's truly nothing to anchor to yet (a brand new room
- * with no history and no prior marker). Callers should treat `0` as
- * "skip the write" rather than substituting a device-clock guess.
- */
-export declare function getServerReadTimestamp(room: RoomForReadTimestamp | null | undefined, heapState?: ReadTimestampHeapState | null): number;
-/**
- * Is `marker` a leftover from a device whose clock was wrong when it
- * stamped a read marker (bug #38)?
- *
- * TWO independent signals must agree before we're willing to throw a
- * stored marker away, because "waive the forward-only guard" is a
- * destructive operation:
- *
- *  1. it sits well past the newest message we know the room has, AND
- *  2. it sits well past real time.
- *
- * Signal 1 alone is NOT enough, and that is the whole point of this
- * function: a device whose local cache for a room is simply stale (very
- * common - any room whose history hasn't been synced yet this session)
- * sees a perfectly legitimate marker written by another device that HAS
- * seen newer messages, and would happily "heal" it backwards, resurrecting
- * already-read messages as unread on every device. A real timestamp can
- * never be ahead of real time, so requiring signal 2 as well means a
- * stale cache on its own can no longer trigger the self-heal.
- *
- * Signal 2 alone is not used either: it would let a device whose own
- * clock is running SLOW mistake every correct marker for a corrupt one.
- */
-export declare function isCorruptFutureReadMarker(marker: number, newestAckedMs: number): boolean;
-/**
- * Resolve the marker to STAMP (locally and to the server) for `room`,
- * honouring an explicit read boundary when one is set.
- *
- * Bug #42 (a regression of #33, reintroduced by #38): #38 made every
- * caller stamp the newest server-acknowledged message unconditionally.
- * That is correct for a user who is at the bottom of the room, but wrong
- * for a user who scrolled up, received messages, and left without
- * scrolling back down - stamping "newest" there silently marks
- * messages they never saw as read, both locally and (because the
- * private-store merge is forward-only) permanently on the server.
- *
- * `boundaryTs` is the msgSortableMs of the newest message the user
- * actually reached (see `readBoundaries` on `RoomMessagesState`,
- * populated by MessageList's `onReadBoundaryChange`). When it's set and
- * positive, it wins - but is still clamped to never exceed the newest
- * server-acknowledged message, so a stale/corrupt boundary can't stamp a
- * marker further ahead than the room's own history supports. When no
- * boundary is set (the common case - the user is at the bottom), this is
- * exactly `getServerReadTimestamp`.
- *
- * Never returns `Date.now()`, directly or indirectly - same rule as
- * `getServerReadTimestamp` (bug #38).
- */
-export declare function getReadMarkerTimestamp(room: RoomForReadTimestamp | null | undefined, heapState?: ReadTimestampHeapState | null, boundaryTs?: number | null): number;
-/**
- * The value to hand `flushLastViewedToPrivateStore` as `visibleRoomTs`
- * for a room being left, or `undefined` when no boundary applies (the
- * flush then uses its own newest-acked default).
- *
- * Exists so the SERVER write goes through the SAME clamp as the local
- * stamp. Passing the raw redux boundary straight through would bypass
- * `getReadMarkerTimestamp`'s clamp on exactly the path where a bad value
- * is permanent: the private-store merge is forward-only, so a boundary
- * that (through a pending own message's device `date`, or a stale
- * readBoundaries entry) sat ahead of the room's real history would be
- * written verbatim and could never be corrected again (bug #38).
- */
-export declare function getFlushBoundaryTs(room: RoomForReadTimestamp | null | undefined, heapState?: ReadTimestampHeapState | null, boundaryTs?: number | null): number | undefined;
-export {};
-//# sourceMappingURL=getServerReadTimestamp.d.ts.map