@nadohq/mobile-client 0.65.0 → 0.66.0

package/src/types/serverModelTypes.ts

@@ -33,6 +33,51 @@ export interface MobileServerAvatarPreset {
  */
 export type MobileNotificationPlatform = 'ios' | 'android';
 
+/**
+ * Notification types supported by the v2 payload protocol.
+ */
+export type MobileNotificationTypeId =
+  | 'new_follower'
+  | 'followed_you_back'
+  | 'order_fill'
+  | 'order_update'
+  | 'liquidation'
+  | 'trader_opened'
+  | 'trader_closed'
+  | 'position_milestone'
+  | 'market_movement'
+  | 'trader_streak'
+  | 'account_drama'
+  | 'weekly_digest';
+
+/**
+ * Named navigation destinations supported by notification payloads.
+ */
+export type MobileNotificationRouteName = MobileServerNotificationRoute['name'];
+
+/** Position milestone options supported by notification settings. */
+export const MOBILE_NOTIFICATION_POSITION_THRESHOLDS = [10, 25, 50] as const;
+
+/** Minimum trade-size options, in whole USD, supported by notification settings. */
+export const MOBILE_NOTIFICATION_MIN_TRADE_SIZES_USD = [
+  0, 100, 1000, 10000,
+] as const;
+
+/** Supported notification position milestone threshold. */
+export type MobileNotificationPositionThreshold =
+  (typeof MOBILE_NOTIFICATION_POSITION_THRESHOLDS)[number];
+
+/** Supported notification minimum trade size, in whole USD. */
+export type MobileNotificationMinTradeSizeUsd =
+  (typeof MOBILE_NOTIFICATION_MIN_TRADE_SIZES_USD)[number];
+
+/** Supported product analytics interaction. */
+export type MobileProductEventName =
+  | 'notif_opened'
+  | 'market_viewed'
+  | 'chart_opened'
+  | 'search';
+
 /**
  * Category of push notification.
  */
@@ -223,6 +268,127 @@ export interface MobileServerNotificationPreferences {
   categories: MobileServerNotificationCategoryPreference[];
 }
 
+/**
+ * Stored push-device metadata shared by registration requests and token ownership responses.
+ */
+export interface MobileServerNotificationDeviceMetadata {
+  /** Device operating system. */
+  platform: MobileNotificationPlatform;
+  /** Locale tag, or null when absent; at most 35 UTF-8 bytes. */
+  locale: string | null;
+  /** App version, or null when absent; at most 64 UTF-8 bytes. */
+  app_version: string | null;
+}
+
+/**
+ * Device capabilities shared by v2 registration and v1/v2 registration queries.
+ */
+export interface MobileServerNotificationCapabilities {
+  /** Exactly one supported payload version. */
+  payload_versions: [1] | [2];
+  /** Supported subset of the registered notification types. */
+  type_ids: MobileNotificationTypeId[];
+  /** Supported subset of the named destinations. */
+  routes: MobileNotificationRouteName[];
+}
+
+/**
+ * Server-side wallet settings; all fields are required on replacement.
+ */
+export interface MobileServerNotificationSettings {
+  /** Own position milestones and the initial weekly digest. */
+  my_positions: boolean;
+  /** One to three unique values; the minimum selects the starting milestone tier. */
+  position_thresholds: MobileNotificationPositionThreshold[];
+  /** Combined order fill/update switch; does not control liquidation notifications. */
+  my_orders: boolean;
+  /** Ordinary followed-trader notifications; enabled bells override this switch. */
+  following_trades: boolean;
+  /** Notifications about posts by followed traders. */
+  following_posts: boolean;
+  /** Minimum trade size for trade notifications, in whole USD. */
+  min_trade_size_usd: MobileNotificationMinTradeSizeUsd;
+  /** New followers and follow-backs. */
+  new_followers: boolean;
+  /** Maps to the legacy announcement preference. */
+  announcements: boolean;
+  /** Opt-in trader streak and account drama discovery notifications. */
+  discovery: boolean;
+}
+
+/**
+ * Server-side allowlisted destination; notification data must never be interpreted as an arbitrary URL.
+ */
+export type MobileServerNotificationRoute =
+  | {
+      /** Public profile destination. */
+      name: 'profile';
+      /** Profile subaccount as bytes32. */
+      subaccount: Hex;
+    }
+  | {
+      /** Market destination. */
+      name: 'market';
+      /** Positive product ID. */
+      product_id: number;
+    }
+  | {
+      /** Own portfolio destination. */
+      name: 'portfolio';
+    };
+
+/**
+ * Server-side v2 push/inbox navigation data, not a complete historical trade or notification body.
+ */
+export interface MobileServerNotificationPayloadV2 {
+  /** Payload protocol version. */
+  payload_version: 2;
+  /** Logical notification UUID, used for click deduplication. */
+  notification_id: string;
+  /** Intended wallet; private navigation must wait for this wallet to connect. */
+  recipient_wallet: Hex;
+  /** Registered notification type. */
+  type_id: MobileNotificationTypeId;
+  /** Supported template version. */
+  template_version: 1;
+  /** Named destination and its parameters. */
+  route: MobileServerNotificationRoute;
+}
+
+/**
+ * Server-side accepted logical notification; does not prove device delivery or read status.
+ */
+export interface MobileServerNotificationInboxItem {
+  /** Logical notification UUID. */
+  notification_id: string;
+  /** Registered notification type. */
+  type_id: MobileNotificationTypeId;
+  /** Navigation data, without title, body, or read state. */
+  data: MobileServerNotificationPayloadV2;
+  /** Intent acceptance time in milliseconds. */
+  created_at: number;
+  /** Backend-computed trade attribution. */
+  trade_within_24h: boolean;
+}
+
+/**
+ * Server-side product analytics event; unused nullable fields must be explicitly null.
+ */
+export interface MobileServerProductEvent {
+  /** Stable event UUID; reuse across retries. */
+  client_event_id: string;
+  /** Supported interaction; notif_opened is not a read-state mutation. */
+  event_name: MobileProductEventName;
+  /** Required for notif_opened and owned by the signing wallet; otherwise null. */
+  notification_id: string | null;
+  /** Actual event time in milliseconds, within the past 7 days or next 5 minutes. */
+  occurred_at: number;
+  /** Required for market_viewed/chart_opened; otherwise null. */
+  product_id: number | null;
+  /** Required for search, nonblank and at most 80 Unicode characters; otherwise null. */
+  query: string | null;
+}
+
 /** Content filters accepted by the six social feed lists. Empty or omitted means all. */
 export type MobileSocialFeedType =
   | 'open'
@@ -432,10 +598,39 @@ export interface MobileServerSocialFeedCommentPreview {
 
 /** Exposure requirements associated with a reading session. */
 export interface MobileServerSocialFeedViewTracking {
-  /** Required visible fraction. */
-  min_visible_ratio: number;
-  /** Required visible duration in milliseconds. */
-  min_duration_ms: number;
+  /**
+   * Detail-visit exposure: report the primary detail target after it is shown in the foreground.
+   * List visible-ratio / dwell thresholds are no longer used.
+   */
+  mode: 'detail_visit';
+}
+
+/** Uploaded feed image metadata; bytes are fetched separately with the reading session. */
+export interface MobileServerSocialFeedImage {
+  /** Image UUID. */
+  image_id: string;
+  /** Backend path for the original image bytes. */
+  url: string;
+  /** Display-orientation width in pixels. */
+  width: number;
+  /** Display-orientation height in pixels. */
+  height: number;
+  /** Detected content type. */
+  content_type: 'image/jpeg' | 'image/png';
+  /** Original file size in bytes. */
+  byte_size: number;
+  /** Always-present thumbnail (longest edge ≤ 512, never upscaled). */
+  thumbnail: MobileServerSocialFeedImageThumbnail;
+}
+
+/** Thumbnail metadata for an uploaded feed image. */
+export interface MobileServerSocialFeedImageThumbnail {
+  /** Backend path for the thumbnail bytes. */
+  url: string;
+  /** Thumbnail width in pixels. */
+  width: number;
+  /** Thumbnail height in pixels. */
+  height: number;
 }
 
 /** Coverage of the candidate authors in a qualification snapshot. */
@@ -484,6 +679,8 @@ export interface MobileServerSocialFeedItemBase {
 
 /** Content shared by authored posts and trade cards. */
 export interface MobileServerSocialFeedContentBase extends MobileServerSocialFeedItemBase {
+  /** Bound images in display order; empty when none. */
+  images: MobileServerSocialFeedImage[];
   /** Card text, empty for automatic cards. */
   text: string;
   /** Mentions in the original, unmodified text. */
@@ -559,13 +756,13 @@ export type MobileServerSocialFeedItem =
   | MobileServerSocialFeedPost
   | MobileServerSocialFeedReply;
 
-/** Fixed-duration social feed reading session. Credentials and cursors must be returned unchanged. */
+/** Idle-renewed social feed reading session. Credentials and cursors must be returned unchanged. */
 export interface MobileServerSocialFeedReadSession {
   /** Session identifier. */
   session_id: string;
   /** Feed, item, or full position history session. */
   mode: MobileSocialFeedReadSessionMode;
-  /** Fixed expiration time in Unix milliseconds; pagination does not extend it. */
+  /** Current idle expiration in Unix milliseconds; legitimate session requests renew it. */
   expires_at_ms: number;
   /** Visibility requirements for explicit exposure reporting. */
   view_tracking: MobileServerSocialFeedViewTracking;
@@ -737,6 +934,8 @@ export interface MobileServerSocialFeedPost extends MobileServerSocialFeedConten
 export interface MobileServerSocialFeedReply extends MobileServerSocialFeedItemBase {
   /** Reply discriminant. */
   kind: 'reply';
+  /** Bound images in display order; empty when none. */
+  images: MobileServerSocialFeedImage[];
   /** Original text. */
   text: string;
   /** Mentions in the text. */

package/src/types/serverQueryTypes.ts

@@ -1,11 +1,14 @@
 import { Hex } from 'viem';
 import { MobileServerSuccessResponse } from './serverBaseTypes';
 import {
-  MobileNotificationPlatform,
   MobileServerAvatarPreset,
   MobileServerFeedTrade,
   MobileServerFollowListAccount,
+  MobileServerNotificationCapabilities,
+  MobileServerNotificationDeviceMetadata,
+  MobileServerNotificationInboxItem,
   MobileServerNotificationPreferences,
+  MobileServerNotificationSettings,
   MobileServerProfile,
   MobileServerSocialFeedActionCandidate,
   MobileServerSocialFeedActionMarker,
@@ -35,8 +38,27 @@ import {
 import {
   MobileServerPublicQueryRequestByType,
   MobileServerPublicQueryRequestType,
+  MobileServerSignedQueryRequestType,
 } from './serverRequestTypes';
 
+/**
+ * Success payloads for each signed `query`, keyed by request `type`.
+ */
+export interface MobileServerSignedQueryResponseByType {
+  /** Wallet subscriptions and the signing Identity's bells. */
+  notification_subscriptions: MobileServerNotificationSubscriptionsResponse;
+  /** Private notification page. */
+  notification_inbox_v2: MobileServerNotificationInboxV2Response;
+}
+
+/**
+ * Full success response for a signed `query`, with its payload inlined alongside `status`.
+ */
+export type MobileServerSignedQuerySuccessResponse<
+  T extends MobileServerSignedQueryRequestType =
+    MobileServerSignedQueryRequestType,
+> = MobileServerSuccessResponse & MobileServerSignedQueryResponseByType[T];
+
 /**
  * Unsigned `public_query` request body: a `type` discriminant flattened with its params.
  */
@@ -165,15 +187,58 @@ export interface MobileServerNotificationPreferencesResponse {
   preferences: MobileServerNotificationPreferences;
 }
 
+/**
+ * Payload of the `notification_registration_v2` public query, including legacy registrations.
+ */
+export interface MobileServerNotificationRegistrationV2Response {
+  /** Opaque decimal string; do not convert to a JavaScript number. */
+  registration_generation: string;
+  /** Persisted capabilities of the most recent registration; legacy type/route arrays are empty. */
+  capabilities: MobileServerNotificationCapabilities;
+}
+
+/**
+ * Full settings document returned by both `notification_settings_v2` and `update_notification_settings_v2`.
+ */
+export interface MobileServerNotificationSettingsV2Response {
+  /** Settings schema version. */
+  schema_version: 2;
+  /** Settings revision, independent of the subscription revision. */
+  revision: number;
+  /** Full saved settings. */
+  settings: MobileServerNotificationSettings;
+}
+
+/**
+ * Payload of the `notification_subscriptions` signed query.
+ */
+export interface MobileServerNotificationSubscriptionsResponse {
+  /** Wallet-level subscription revision; read again after every mutation. */
+  revision: number;
+  /** Whether the one-time local favorites import has completed. */
+  favorites_imported: boolean;
+  /** Subscribed market IDs in ascending order. */
+  market_ids: number[];
+  /** Followed subaccounts with bells enabled for the signing Identity. */
+  trader_bells: Hex[];
+}
+
+/**
+ * Payload of the `notification_inbox_v2` signed query, ordered newest first.
+ */
+export interface MobileServerNotificationInboxV2Response {
+  /** Accepted intents owned by the signing wallet. */
+  notifications: MobileServerNotificationInboxItem[];
+  /** Pass unchanged to the next request, or null when pagination is complete. */
+  next_cursor: string | null;
+}
+
 /**
  * Payload of the `registered_wallet` public query success response. Inlined into the envelope rather than
  * nested under a key, matching the backend's `RegisteredWalletResponse`.
  */
-export interface MobileServerRegisteredWalletResponse {
+export interface MobileServerRegisteredWalletResponse extends MobileServerNotificationDeviceMetadata {
   wallet: Hex;
-  platform: MobileNotificationPlatform;
-  locale: string | null;
-  app_version: string | null;
   token_fingerprint_prefix: string;
   last_seen_at: number;
 }
@@ -185,6 +250,10 @@ export interface MobileServerRegisteredWalletResponse {
  * by {@link MobileServerPublicQuerySuccessResponse}.
  */
 export interface MobileServerPublicQueryResponseByType {
+  /** Latest saved device generation and v1/v2 capabilities. */
+  notification_registration_v2: MobileServerNotificationRegistrationV2Response;
+  /** Full settings document with its revision. */
+  notification_settings_v2: MobileServerNotificationSettingsV2Response;
   /** Open position candidates. */
   self_feed_positions: MobileServerSocialFeedPositionsResponse;
   /** Position command resolution. */

package/src/types/serverRequestTypes.ts

@@ -1,13 +1,73 @@
 import { Hex } from 'viem';
 import { MobileSignedInner } from '../signing/types';
 import {
+  MobileNotificationRouteName,
+  MobileNotificationTypeId,
+  MobileServerNotificationDeviceMetadata,
   MobileServerNotificationPreferences,
+  MobileServerNotificationSettings,
   MobileServerSocialFeedChartRange,
   MobileSocialFeedChartInterval,
   MobileSocialFeedMarketCategory,
   MobileSocialFeedPresenceState,
   MobileSocialFeedType,
 } from './serverModelTypes';
+import type { MobileServerSignedQueryResponseByType } from './serverQueryTypes';
+
+/**
+ * Common wire-format credential for token-authenticated notification requests.
+ * Unregistration also accepts an inactive or unknown well-formed token.
+ */
+export interface MobileServerWithExpoTokenParams {
+  /** Expo push token; never expose it to another user. */
+  expo_token: string;
+}
+
+/**
+ * Registration fields shared by v1 and v2 signed inner payloads.
+ * Nullable metadata keys remain present when signing so the MessagePack hash matches the backend.
+ */
+export interface MobileServerRegisterExpoTokenParams
+  extends
+    MobileServerWithExpoTokenParams,
+    MobileServerNotificationDeviceMetadata {}
+
+/** Registration request with a v2-only capability declaration. */
+export interface MobileServerRegisterExpoTokenV2Params extends MobileServerRegisterExpoTokenParams {
+  /** Actual notification features supported by the device. */
+  capabilities: {
+    /** Registration accepts only the v2 protocol. */
+    payload_versions: [2];
+    /** Supported notification types. */
+    type_ids: MobileNotificationTypeId[];
+    /** Supported navigation destinations. */
+    routes: MobileNotificationRouteName[];
+  };
+}
+
+/**
+ * One subscription operation; exactly one operation is non-null and unused operations must be null.
+ */
+export interface MobileServerNotificationSubscriptionsUpdate {
+  /** Latest subscription revision, not the settings revision. */
+  expected_revision: number;
+  /** Set one bell; enabling requires an existing follow relationship. */
+  trader_bell: {
+    /** Target non-isolated subaccount belonging to another wallet. */
+    subaccount: Hex;
+    /** Desired bell state. */
+    enabled: boolean;
+  } | null;
+  /** Subscribe or unsubscribe one known market. */
+  market: {
+    /** Positive market product ID. */
+    product_id: number;
+    /** Desired subscription state. */
+    subscribed: boolean;
+  } | null;
+  /** One-time merge of up to 500 local market IDs; mutually exclusive with the other operations. */
+  import_markets: number[] | null;
+}
 
 /**
  * Opt-in extras for a `profiles` query. Each one costs extra rate-limit weight per profile and adds fields
@@ -68,7 +128,7 @@ export interface MobileServerSocialFeedListParams {
   minimum_notional?: number;
   /** Page size, 1–50; defaults to 20. */
   limit?: number;
-  /** Fixed 15-minute reading session; required with cursor. */
+  /** Original reading session; required with cursor. Legitimate requests renew its idle expiration. */
   session_id?: string;
   /** Opaque pagination cursor, distinct from update_cursor and watermark. */
   cursor?: string;
@@ -213,6 +273,8 @@ export interface MobileServerPublicQueryRequestByType {
   feed_item: MobileServerSocialFeedReadParams & {
     /** Target item UUID. */
     item_id: string;
+    /** Detail-visit event; omit for prefetch. Does not increment the count alone. */
+    view_event_id?: string;
     /** Preview size, 0-3. */
     comment_preview_limit?: number;
     /** Omit to create a new reading session. */
@@ -263,8 +325,12 @@ export interface MobileServerPublicQueryRequestByType {
      */
     cursor?: string;
   };
-  notification_preferences: { expo_token: string };
-  registered_wallet: { expo_token: string };
+  notification_preferences: MobileServerWithExpoTokenParams;
+  /** Persisted device generation and capabilities. */
+  notification_registration_v2: MobileServerWithExpoTokenParams;
+  /** Versioned notification settings. */
+  notification_settings_v2: MobileServerWithExpoTokenParams;
+  registered_wallet: MobileServerWithExpoTokenParams;
 }
 
 /**
@@ -282,14 +348,24 @@ export type MobileServerPublicQueryRequestType =
  * notification writes use the backend's last-write-wins commit order, so callers must serialize them.
  */
 export interface MobileServerPublicExecuteRequestByType {
-  /** Explicit exposure report using the original browsing credential. */
+  /** Full settings replacement with optimistic concurrency control. */
+  update_notification_settings_v2: MobileServerWithExpoTokenParams & {
+    /** Latest settings revision. */
+    expected_revision: number;
+    /** Complete settings document. */
+    settings: MobileServerNotificationSettings;
+  };
+
+  /** Explicit detail-visit report using the original browsing credential. */
   record_feed_views: {
     /** Original reading session. */
     session_id: string;
-    /** Fully delivered interactive items. */
-    item_ids: string[];
     /** Original credential. */
     viewer_token: string;
+    /** Detail-visit event previously registered on feed_item. */
+    view_event_id: string;
+    /** Exactly one fully delivered detail-target item. */
+    item_ids: string[];
   };
   /** Per-page visitor lease; no wallet signature. */
   position_presence: {
@@ -320,20 +396,33 @@ export type MobileServerPublicExecuteRequestType =
   keyof MobileServerPublicExecuteRequestByType;
 
 /**
- * Discriminant `type` values for signed `execute` requests. Every signed route the SDK calls is a write, so
- * this is the full set of {@link MobileSignedInner} tags. Unlike the public queries these carry no separate
- * params map — a signed request body *is* its inner payload flattened with the envelope, so
+ * Discriminant `type` values for signed `execute` requests, excluding signed queries. Unlike the public
+ * queries these carry no separate params map — a signed request body is its inner payload flattened with the envelope, so
  * {@link MobileSignedInner} is the single source of truth for both the fields and their significant order.
  */
-export type MobileServerExecuteRequestType = MobileSignedInner['type'];
+export type MobileServerExecuteRequestType = Exclude<
+  MobileSignedInner['type'],
+  MobileServerSignedQueryRequestType
+>;
+
+/**
+ * Discriminant `type` values for signed `query` requests, distinct from unsigned `public_query` requests.
+ */
+export type MobileServerSignedQueryRequestType =
+  keyof MobileServerSignedQueryResponseByType;
 
 /**
  * Wire `request_type` the backend echoes on failure envelopes, prefixed by the route that produced it:
  * `public_query_*` for unsigned queries, `public_execute_*` for unsigned writes, and `execute_*` for signed
- * writes (e.g. `execute_set_username`). The prefix names the route, so it never carries the `mobile:` prefix
- * that the EIP-712 method does.
+ * writes (e.g. `execute_set_username`), or `query_*` for signed reads. Unlike the EIP-712 method,
+ * these values never carry the `mobile:` prefix. Protected image reads use `feed_image` or
+ * `feed_comment_image` without a route prefix; malformed multipart uploads use `execute_image_upload`.
  */
 export type MobileServerRequestType =
+  | 'feed_image'
+  | 'feed_comment_image'
+  | 'execute_image_upload'
+  | `query_${MobileServerSignedQueryRequestType}`
   | `public_query_${MobileServerPublicQueryRequestType}`
   | `public_execute_${MobileServerPublicExecuteRequestType}`
   | `execute_${MobileServerExecuteRequestType}`;

package/src/utils/buildMobileFeedImageMultipart.test.ts

@@ -0,0 +1,45 @@
+import { afterEach, describe, expect, it, jest } from '@jest/globals';
+import { buildMobileFeedImageMultipart } from './buildMobileFeedImageMultipart';
+
+describe('buildMobileFeedImageMultipart', () => {
+  afterEach(() => {
+    jest.restoreAllMocks();
+  });
+
+  it('keeps multipart overhead fixed across timestamp and random boundary lengths', () => {
+    const payload = '{"type":"create_feed_post_image_uploads"}';
+    const fileBytes = new Uint8Array([0, 1, 255]);
+    const expected = buildMobileFeedImageMultipart(payload, fileBytes);
+    for (const timestamp of [0, 1_700_000_000_000, 8_640_000_000_000_000]) {
+      for (const random of [0, 0.000001, 0.5, 0.999999]) {
+        jest.spyOn(Date, 'now').mockReturnValue(timestamp);
+        jest.spyOn(Math, 'random').mockReturnValue(random);
+        const actual = buildMobileFeedImageMultipart(payload, fileBytes);
+        expect(actual.body.byteLength).toBe(expected.body.byteLength);
+        expect(actual.contentType.length).toBe(expected.contentType.length);
+      }
+    }
+  });
+
+  it('emits payload and file parts with a boundary Content-Type', () => {
+    const fileBytes = new Uint8Array([0, 1, 127, 128, 255, 13, 10]);
+    const { body, contentType } = buildMobileFeedImageMultipart(
+      '{"type":"create_feed_post_image_uploads"}',
+      fileBytes,
+    );
+    const text = String.fromCharCode(...body);
+    expect(contentType.startsWith('multipart/form-data; boundary=')).toBe(true);
+    expect(text).toContain('name="payload"');
+    expect(text).toContain('name="file"; filename="image"');
+    expect(text).toContain('{"type":"create_feed_post_image_uploads"}');
+    const boundary = contentType.split('boundary=')[1];
+    const fileStart = text.indexOf('\r\n\r\n', text.indexOf('name="file"')) + 4;
+    expect(body.slice(fileStart, fileStart + fileBytes.length)).toEqual(
+      fileBytes,
+    );
+    expect(text.slice(fileStart + fileBytes.length)).toBe(
+      `\r\n--${boundary}--\r\n`,
+    );
+    expect(text.startsWith(`--${boundary}\r\n`)).toBe(true);
+  });
+});

package/src/utils/buildMobileFeedImageMultipart.ts

@@ -0,0 +1,36 @@
+import { concatBytes, stringToBytes } from 'viem';
+
+/**
+ * Builds a multipart/form-data body for feed image uploads without relying on DOM FormData/Blob.
+ * Parts are exactly `payload` (JSON text) and `file` (raw bytes), matching the mobile execute contract.
+ * @param payloadJson - Stringified signed execute body.
+ * @param fileBytes - Original image bytes.
+ * @returns Raw multipart body and its Content-Type header value including boundary.
+ */
+export function buildMobileFeedImageMultipart(
+  payloadJson: string,
+  fileBytes: Uint8Array,
+): { body: Uint8Array; contentType: string } {
+  // Fixed-length boundaries keep multipart overhead identical for the pre-signing size check and upload.
+  const boundary = `----nadoFeedImage${Date.now().toString(16).padStart(14, '0')}${Math.floor(
+    Math.random() * 1e6,
+  )
+    .toString(16)
+    .padStart(5, '0')}`;
+  const preamble =
+    `--${boundary}\r\n` +
+    'Content-Disposition: form-data; name="payload"\r\n' +
+    'Content-Type: application/json\r\n\r\n' +
+    `${payloadJson}\r\n` +
+    `--${boundary}\r\n` +
+    'Content-Disposition: form-data; name="file"; filename="image"\r\n' +
+    'Content-Type: application/octet-stream\r\n\r\n';
+  return {
+    body: concatBytes([
+      stringToBytes(preamble),
+      fileBytes,
+      stringToBytes(`\r\n--${boundary}--\r\n`),
+    ]),
+    contentType: `multipart/form-data; boundary=${boundary}`,
+  };
+}

package/src/utils/feed.ts

@@ -4,6 +4,9 @@
  */
 export const MOBILE_FEED_MAX_PAGE_SIZE = 50;
 
+/** Maximum feed image upload request size, including the signed payload and multipart framing (2 MiB). */
+export const MOBILE_FEED_IMAGE_MAX_REQUEST_BYTES = 2 * 1024 * 1024;
+
 /**
  * Lowest minimum notional the backend accepts, in whole dollars. Filtered requests below this fail with
  * `INVALID_FEED_FILTER`; omitting the filter entirely returns the unfiltered feed.