@myronsi/messenger-api 2.1.0-alpha.1.next.59 → 2.1.0-alpha.10

package/CHANGELOG.md

@@ -2,6 +2,71 @@
 
 Contract changes only. The backend changelog is `CHANGELOG.md` in the repository root. Rules: `docs/api-compatibility.md`.
 
+## 2.1.0-alpha.10
+
+- `GET /attachments/{attachment_id}/content` is cached for an hour again (`private, max-age=3600`) instead of a
+  year, so a file is not kept in caches long after its message is deleted. Versioned avatar URLs keep the
+  year-long cache.
+- `POST /chats/{chat_id}/messages/delete` with `scope` everyone treats messages that are already deleted for
+  everyone as done (`204` instead of `404`), so a retry after a partial failure deletes the rest.
+- WebSocket: a connection with more than 64 client events waiting to be handled is closed with `1013`.
+- WebSocket: a user has at most 10 connections per server; opening another closes the oldest with the new close
+  code `4429`.
+- `GET /users/{user_id}` and `GET /usernames/{username}` answer `404` for a user whose `search_visibility` hides
+  them from the current user, unless the two share a chat, and are rate limited per user (`429`).
+  `PUT /users/{user_id}/contact-name` follows the same rules and limit.
+- `contacts` (and `shared_chats`) count a direct chat only once the user opened it or read a message in it, so
+  opening an empty chat with someone does not make you their contact. Groups count as before.
+
+## 2.1.0-alpha.9
+
+- Privacy exceptions apply to every value of avatar, profile and presence visibility, not only to `*_except`:
+  an `allow` exception always shows the item to that user and a `deny` exception always hides it. Group invites
+  already worked this way.
+- `direct_messages` and `search_visibility` take exception lists too (`PUT /me/privacy/exceptions/{setting_key}/{effect}`
+  and `exceptions` of `PrivacySettings`): `allow` lets the user start a direct chat without approval or find you in
+  search, `deny` never does.
+
+## 2.1.0-alpha.8
+
+- Adds `POST /chats/{chat_id}/messages/forward` (up to 20 messages to up to 20 chats, at most 20 copies, oldest
+  first) and `POST /chats/{chat_id}/messages/delete` (up to 100 messages, `scope` me or everyone). Both check
+  every message first and change nothing when one is refused.
+
+## 2.1.0-alpha.7
+
+- Adds `DELETE /me/avatars/{avatar_id}`: removes one of your avatars from the history and answers the updated
+  `Me`. Deleting the current avatar makes the newest remaining one current again, or the default when none is left.
+
+## 2.1.0-alpha.6
+
+- `Message` adds optional `reply_preview` (`ReplyPreview`: id, type, sender, the first 100 characters of the
+  text, attachment, is_deleted) on history pages and `message` events, so a reply shows what it answers even
+  when that message is not loaded. It is absent when the answered message is gone or hidden for the recipient.
+
+## 2.1.0-alpha.5
+
+- A user's `avatar_url` adds `?rev={revision}`, which changes with every new avatar. `GET /users/{user_id}/avatar`
+  accepts `rev`; while it matches the current avatar, the answer is `Cache-Control: private, max-age=31536000, immutable`.
+- `GET /attachments/{attachment_id}/content` is cached for a year (`immutable`): an attachment's bytes never change.
+
+## 2.1.0-alpha.4
+
+- Editing a file message accepts an empty `content` (HTTP `PATCH /messages/{message_id}` and the WebSocket `edit`
+  event): it removes the caption. A text message still needs at least one character.
+
+## 2.1.0-alpha.3
+
+- Adds `GET /notifications/avatar/{token}` and `POST /notifications/read/{token}` without a session, for the
+  sender photo and the "Mark as read" action of a web push. Both answer `404` for a forged, expired or ended token.
+- Web push payloads add `preview`, `read_token` and, with previews on, `sender_id` and `avatar_token`. Tokens are bound to the push
+  device and its session.
+
+## 2.1.0-alpha.2
+
+- Adds notification preferences, session-bound push device registration and per-tab activity leases.
+- Adds chat notification mutes for one hour, eight hours, indefinitely, or until unmuted.
+
 ## 2.1.0-alpha.1
 
 - Registration returns a one-time recovery_key. GET /me adds recovery_setup_required.

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-/* Generated from api/openapi.yaml 2.1.0-alpha.1. Do not edit. */
-export declare const API_VERSION: "2.1.0-alpha.1";
+/* Generated from api/openapi.yaml 2.1.0-alpha.10. Do not edit. */
+export declare const API_VERSION: "2.1.0-alpha.10";
 export type { paths, components, operations } from "./schema.js";
 export * from "./ws-events.js";

package/dist/index.js

@@ -1 +1 @@
-export const API_VERSION = "2.1.0-alpha.1";
+export const API_VERSION = "2.1.0-alpha.10";