@openmarket/rooms-client 0.1.0 → 0.3.0

package/dist/agent/armed-mode.d.ts

@@ -89,18 +89,35 @@ export interface ArmedRoomState {
 }
 /** A fresh armed state for a newly armed room. */
 export declare function makeArmedRoomState(roomId: string, lastSeq?: number): ArmedRoomState;
+/**
+ * A fresh armed state that CARRIES the cost/rate counters from a prior armed
+ * session of the same room. Disarm/rearm must not zero the cooldown, hourly
+ * window, or session budget: otherwise toggling /disarm + /arm bypasses every
+ * cost guard. Error and chain counters DO reset (rearming is an explicit
+ * operator action; a fresh process still starts with nothing retained).
+ */
+export declare function rearmedRoomState(roomId: string, retired: ArmedRoomState | null, lastSeq?: number): ArmedRoomState;
+/** Seqs of the user's own posts in a window of entries; the reply-trigger
+ *  check tests `inReplyTo` against this set. Pure. */
+export declare function ownSeqsOf(entries: ReadonlyArray<RoomLedgerEntry>, ownUserId: string): Set<number>;
 /**
  * Whether a single incoming entry is a qualifying TRIGGER: a NEW human POST in
- * the room that @mentions the user's own handle. Agent posts, system entries,
- * the user's own posts, and non-mentions never trigger. Pure.
+ * the room that @mentions the user's own handle, OR (when `ownSeqs` is given)
+ * directly replies to one of the user's own messages. Reply semantics match a
+ * mention (replying pings the author), so armed mode treats both as addressed
+ * to the user. Agent posts, system entries, the user's own posts, and
+ * non-mentions never trigger. Pure.
  */
-export declare function isTriggeringEntry(entry: RoomLedgerEntry, ownHandle: string, ownUserId: string): boolean;
+export declare function isTriggeringEntry(entry: RoomLedgerEntry, ownHandle: string, ownUserId: string, ownSeqs?: ReadonlySet<number>): boolean;
 /**
  * The newest qualifying trigger among entries strictly newer than
  * `afterSeq`, or null if none. Used by the loop to decide whether the latest
- * batch of room messages contains a reason to act. Pure.
+ * batch of room messages contains a reason to act. Reply triggers resolve
+ * against the user's own seqs within `entries` unless a wider `ownSeqs`
+ * window is supplied (the live single-entry path passes the room cache).
+ * Pure.
  */
-export declare function findTrigger(entries: ReadonlyArray<RoomLedgerEntry>, ownHandle: string, ownUserId: string, afterSeq: number): RoomLedgerEntry | null;
+export declare function findTrigger(entries: ReadonlyArray<RoomLedgerEntry>, ownHandle: string, ownUserId: string, afterSeq: number, ownSeqs?: ReadonlySet<number>): RoomLedgerEntry | null;
 /** Autonomous posts inside the rolling hourly window as of `now`. */
 export declare function postsInWindow(state: ArmedRoomState, now?: number): number;
 /** Remaining cooldown (ms) before the next autonomous post is allowed; 0 when

package/dist/agent/armed-mode.js

@@ -83,12 +83,41 @@ export function makeArmedRoomState(roomId, lastSeq = 0) {
         lastEvaluatedSeq: lastSeq,
     };
 }
+/**
+ * A fresh armed state that CARRIES the cost/rate counters from a prior armed
+ * session of the same room. Disarm/rearm must not zero the cooldown, hourly
+ * window, or session budget: otherwise toggling /disarm + /arm bypasses every
+ * cost guard. Error and chain counters DO reset (rearming is an explicit
+ * operator action; a fresh process still starts with nothing retained).
+ */
+export function rearmedRoomState(roomId, retired, lastSeq = 0) {
+    const state = makeArmedRoomState(roomId, lastSeq);
+    if (!retired || retired.roomId !== roomId)
+        return state;
+    state.postTimes = [...retired.postTimes];
+    state.postsThisSession = retired.postsThisSession;
+    state.tokensThisSession = retired.tokensThisSession;
+    return state;
+}
+/** Seqs of the user's own posts in a window of entries; the reply-trigger
+ *  check tests `inReplyTo` against this set. Pure. */
+export function ownSeqsOf(entries, ownUserId) {
+    const seqs = new Set();
+    for (const entry of entries) {
+        if (entry.userId === ownUserId)
+            seqs.add(entry.seq);
+    }
+    return seqs;
+}
 /**
  * Whether a single incoming entry is a qualifying TRIGGER: a NEW human POST in
- * the room that @mentions the user's own handle. Agent posts, system entries,
- * the user's own posts, and non-mentions never trigger. Pure.
+ * the room that @mentions the user's own handle, OR (when `ownSeqs` is given)
+ * directly replies to one of the user's own messages. Reply semantics match a
+ * mention (replying pings the author), so armed mode treats both as addressed
+ * to the user. Agent posts, system entries, the user's own posts, and
+ * non-mentions never trigger. Pure.
  */
-export function isTriggeringEntry(entry, ownHandle, ownUserId) {
+export function isTriggeringEntry(entry, ownHandle, ownUserId, ownSeqs) {
     if (entry.type !== RoomLedgerEntryType.POST)
         return false;
     if (entry.isAgent)
@@ -102,6 +131,10 @@ export function isTriggeringEntry(entry, ownHandle, ownUserId) {
         return false;
     if (me.length > 0 && fromHandle === me)
         return false;
+    // A direct reply to one of our messages is addressed to us. The set only
+    // spans the cached window, so replies to long-scrolled-out posts stay inert.
+    if (entry.inReplyTo !== undefined && ownSeqs?.has(entry.inReplyTo))
+        return true;
     // Must EXPLICITLY @mention the user's own handle. A bare-substring match (the
     // old mentionsAgent) fired on ordinary words for short handles like "may" /
     // "btc"; armed posting has no human review, so it triggers ONLY on an `@handle`
@@ -111,14 +144,17 @@ export function isTriggeringEntry(entry, ownHandle, ownUserId) {
 /**
  * The newest qualifying trigger among entries strictly newer than
  * `afterSeq`, or null if none. Used by the loop to decide whether the latest
- * batch of room messages contains a reason to act. Pure.
+ * batch of room messages contains a reason to act. Reply triggers resolve
+ * against the user's own seqs within `entries` unless a wider `ownSeqs`
+ * window is supplied (the live single-entry path passes the room cache).
+ * Pure.
  */
-export function findTrigger(entries, ownHandle, ownUserId, afterSeq) {
+export function findTrigger(entries, ownHandle, ownUserId, afterSeq, ownSeqs = ownSeqsOf(entries, ownUserId)) {
     let found = null;
     for (const entry of entries) {
         if (entry.seq <= afterSeq)
             continue;
-        if (isTriggeringEntry(entry, ownHandle, ownUserId))
+        if (isTriggeringEntry(entry, ownHandle, ownUserId, ownSeqs))
             found = entry;
     }
     return found;

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { type RoomAccessMode, type RoomAttachment, type RoomAuditLogPayload, type RoomAuthSuccessPayload, type RoomBackfillPayload, type RoomDmHistoryResultPayload, type RoomDmMessagePayload, type RoomDmOpenedPayload, type RoomFriendPresence, type RoomInvitedPayload, type RoomLedgerEntry, type RoomMemberRemovedPayload, type RoomMemberRoleChangedPayload, type RoomMeta, type RoomPinsPayload, type RoomPresencePayload, type RoomReactorsPayload, type RoomReadStatePayload, type RoomReportedPayload, type RoomRole, type RoomSearchResultsPayload, type RoomSearchScope, type RoomSpace, type RoomThreadPayload, type RoomTopic, type RoomTopicAttention, type RoomTopicResultPayload, type RoomTopicsResultPayload, type RoomUserStatus, type RoomWhoPayload } from "./types.js";
+import { type RoomAccessMode, type RoomAttachmentInput, type RoomAuditLogPayload, type RoomAuthSuccessPayload, type RoomBackfillPayload, type RoomDmHistoryResultPayload, type RoomDmMessagePayload, type RoomDmOpenedPayload, type RoomFriendPresence, type RoomInvitedPayload, type RoomLedgerEntry, type RoomMemberRemovedPayload, type RoomMemberRoleChangedPayload, type RoomMeta, type RoomPinsPayload, type RoomPresencePayload, type RoomReactorsPayload, type RoomReadStatePayload, type RoomReportedPayload, type RoomRole, type RoomSearchResultsPayload, type RoomSearchScope, type RoomSpace, type RoomThreadPayload, type RoomTopic, type RoomTopicAttention, type RoomTopicResultPayload, type RoomTopicsResultPayload, type RoomUserStatus, type RoomWhoPayload } from "./types.js";
 import { type RoomWebSocketCtor, RoomWsClient } from "./ws-client.js";
 export interface RoomClientConfig {
     url: string;
@@ -39,7 +39,7 @@ export interface RoomJoinOptions {
 }
 export interface RoomSayOptions extends RoomJoinOptions {
     text?: string;
-    attachments?: RoomAttachment[];
+    attachments?: RoomAttachmentInput[];
     inReplyTo?: number;
     /** Post directly into a topic; the room's linear stream is unaffected. */
     topicId?: string;
@@ -208,6 +208,10 @@ export interface RoomDmSendRequest {
     conversationId?: string;
     content: string;
     clientMsgId?: string;
+    /** A private DM-attachment key (dm-attachments/…) or a legacy public image
+     *  URL. Stored on the message's imageUrl; the client signs keys on render.
+     *  Additive — omitted for text-only sends. */
+    imageUrl?: string;
 }
 export interface RoomThreadRequest {
     room: string;
@@ -251,13 +255,35 @@ export declare function requestRoomFriends(client: RoomWsClient): Promise<RoomFr
 export declare function openRoomDmOnClient(client: RoomWsClient, request: RoomDmOpenRequest, timeoutMs?: number): Promise<RoomDmOpenedPayload>;
 export declare function requestRoomDmHistoryOnClient(client: RoomWsClient, request: RoomDmHistoryRequest, timeoutMs?: number): Promise<RoomDmHistoryResultPayload>;
 export declare function sendRoomDmOnClient(client: RoomWsClient, request: RoomDmSendRequest, timeoutMs?: number): Promise<RoomDmMessagePayload>;
+/** Edit one of my DM messages. Fire-and-forget over the WS; the relay fans out
+ *  DM_MESSAGE_EDITED to both participants. */
+export declare function editRoomDmOnClient(client: RoomWsClient, request: {
+    conversationId?: string;
+    username?: string;
+    messageId: string;
+    content: string;
+}): void;
+/** Soft-delete one of my DM messages. The relay fans out DM_MESSAGE_DELETED. */
+export declare function deleteRoomDmOnClient(client: RoomWsClient, request: {
+    conversationId?: string;
+    username?: string;
+    messageId: string;
+}): void;
+/** Toggle a reaction on a DM message. The relay fans out DM_REACTION_UPDATED. */
+export declare function reactRoomDmOnClient(client: RoomWsClient, request: {
+    conversationId?: string;
+    username?: string;
+    messageId: string;
+    emoji: string;
+    op: "add" | "remove";
+}): void;
 export declare function peekRoom(config: RoomClientConfig, options: RoomPeekOptions): Promise<RoomBackfillPayload>;
 export declare function sayRoom(config: RoomClientConfig, options: RoomSayOptions): Promise<RoomSayResult>;
 export declare function joinRoom(config: RoomClientConfig, options: RoomJoinOptions): Promise<RoomJoinedSession>;
 /** Re-join a room on an already-connected client (used after a reconnect). */
 export declare function rejoinRoomOnClient(client: RoomWsClient, options: RoomJoinOptions): Promise<RoomBackfillPayload>;
 export declare function attachRejoinOnReconnect(client: RoomWsClient, options: RoomJoinOptions, latestSeq: () => number | undefined, onRejoined?: (backfill: RoomBackfillPayload) => void, onError?: (err: unknown) => void): () => void;
-export declare function postRoomMessage(client: RoomWsClient, room: string, text: string, inReplyTo?: number, attachments?: RoomAttachment[], topicId?: string): string;
+export declare function postRoomMessage(client: RoomWsClient, room: string, text: string, inReplyTo?: number, attachments?: RoomAttachmentInput[], topicId?: string): string;
 export declare function sendRoomTyping(client: RoomWsClient, room: string, state: "start" | "stop"): void;
 export declare function sendRoomStatus(client: RoomWsClient, status: RoomUserStatus, statusText?: string | null): void;
 /**

package/dist/client.js

@@ -465,6 +465,7 @@ export async function sendRoomDmOnClient(client, request, timeoutMs) {
             clientMsgId,
             ...(request.username ? { username: request.username } : {}),
             ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+            ...(request.imageUrl ? { imageUrl: request.imageUrl } : {}),
         },
         timestamp: Date.now(),
     });
@@ -473,6 +474,46 @@ export async function sendRoomDmOnClient(client, request, timeoutMs) {
         msg.payload.message.clientMsgId === clientMsgId, timeoutMs, requestId);
     return sent.payload;
 }
+/** Edit one of my DM messages. Fire-and-forget over the WS; the relay fans out
+ *  DM_MESSAGE_EDITED to both participants. */
+export function editRoomDmOnClient(client, request) {
+    client.send({
+        type: RoomClientMessageType.DM_EDIT,
+        payload: {
+            messageId: request.messageId,
+            content: request.content,
+            ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+            ...(request.username ? { username: request.username } : {}),
+        },
+        timestamp: Date.now(),
+    });
+}
+/** Soft-delete one of my DM messages. The relay fans out DM_MESSAGE_DELETED. */
+export function deleteRoomDmOnClient(client, request) {
+    client.send({
+        type: RoomClientMessageType.DM_DELETE,
+        payload: {
+            messageId: request.messageId,
+            ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+            ...(request.username ? { username: request.username } : {}),
+        },
+        timestamp: Date.now(),
+    });
+}
+/** Toggle a reaction on a DM message. The relay fans out DM_REACTION_UPDATED. */
+export function reactRoomDmOnClient(client, request) {
+    client.send({
+        type: RoomClientMessageType.DM_REACT,
+        payload: {
+            messageId: request.messageId,
+            emoji: request.emoji,
+            op: request.op,
+            ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+            ...(request.username ? { username: request.username } : {}),
+        },
+        timestamp: Date.now(),
+    });
+}
 export async function peekRoom(config, options) {
     if (!config.webSocketCtor) {
         try {

package/dist/shared/rooms-protocol.d.ts

@@ -38,6 +38,9 @@ export declare const RoomClientMessageType: {
     readonly DM_HISTORY: "DM_HISTORY";
     readonly DM_SEND: "DM_SEND";
     readonly DM_READ: "DM_READ";
+    readonly DM_EDIT: "DM_EDIT";
+    readonly DM_DELETE: "DM_DELETE";
+    readonly DM_REACT: "DM_REACT";
     readonly TOPIC_CREATE: "TOPIC_CREATE";
     readonly TOPIC_RENAME: "TOPIC_RENAME";
     readonly TOPIC_MOVE: "TOPIC_MOVE";
@@ -87,6 +90,9 @@ export declare const RoomServerMessageType: {
     readonly DM_HISTORY: "DM_HISTORY";
     readonly DM_MESSAGE: "DM_MESSAGE";
     readonly DM_INBOX_UPDATED: "DM_INBOX_UPDATED";
+    readonly DM_MESSAGE_EDITED: "DM_MESSAGE_EDITED";
+    readonly DM_MESSAGE_DELETED: "DM_MESSAGE_DELETED";
+    readonly DM_REACTION_UPDATED: "DM_REACTION_UPDATED";
     readonly TOPIC: "TOPIC";
     readonly TOPICS: "TOPICS";
     readonly TOPIC_UPDATED: "TOPIC_UPDATED";
@@ -211,13 +217,27 @@ export interface RoomLedgerEntry {
     roomRole?: RoomRole | null | undefined;
 }
 export interface RoomAttachment {
-    /** Object key under room-attachments/; clients sign it at render time. */
-    key: string;
+    /**
+     * Object key under room-attachments/; clients sign it at render time.
+     * Absent while scanStatus is "pending" on entries served to members: the
+     * store withholds the signable key until the scan clears, so render the
+     * metadata as a placeholder and do not attempt signing without a key.
+     */
+    key?: string | undefined;
     name: string;
     size: number;
     mime: string;
     scanStatus?: "pending" | "clean" | "held" | undefined;
 }
+/**
+ * A postable attachment reference. Outbound frames must always carry the
+ * stored key (senders reference their own uploads, which include it); only
+ * read views of pending entries may be keyless, and those must never be
+ * forwarded back into a post.
+ */
+export type RoomAttachmentInput = RoomAttachment & {
+    key: string;
+};
 /**
  * A registry-backed topic inside a channel. The id is permanent: rename
  * changes `name` only, and links (`om://topic/<topicId>`) keep resolving.
@@ -438,6 +458,11 @@ export interface RoomDmMessage {
     /** Sealed DM: content is '' and the opaque envelope rides here. */
     secret?: RoomLedgerSecretPayload | null | undefined;
     metadata?: Record<string, unknown> | undefined;
+    /** Legacy public chat-image URL (renders as-is, no signing). */
+    imageUrl?: string | null | undefined;
+    /** Private, signed, scanned DM attachments (dm-attachments/ keyspace).
+     *  Additive: old messages carry none and render unchanged. */
+    attachments?: RoomAttachment[] | undefined;
 }
 export interface RoomDmOpenPayload {
     requestId?: string;
@@ -459,6 +484,58 @@ export interface RoomDmSendPayload {
     conversationId?: string;
     content: string;
     clientMsgId?: string;
+    /** DM-attachment key or legacy public image URL; stored on the message's
+     *  imageUrl. Additive — text-only sends omit it. */
+    imageUrl?: string;
+}
+/** Client → server: edit one of my DM messages (sealed messages are rejected). */
+export interface RoomDmEditPayload {
+    requestId?: string;
+    conversationId?: string;
+    username?: string;
+    messageId: string;
+    content: string;
+}
+/** Client → server: soft-delete one of my DM messages (tombstone in place). */
+export interface RoomDmDeletePayload {
+    requestId?: string;
+    conversationId?: string;
+    username?: string;
+    messageId: string;
+}
+/** Server → both participants: a DM message was edited. */
+export interface RoomDmMessageEditedPayload {
+    conversationId: string;
+    messageId: string;
+    content: string;
+    editedAt: string | number;
+    participant: RoomDmParticipant;
+}
+/** Server → both participants: a DM message was soft-deleted (tombstone). */
+export interface RoomDmMessageDeletedPayload {
+    conversationId: string;
+    messageId: string;
+    deletedAt: string | number;
+    participant: RoomDmParticipant;
+}
+/** Client → server: toggle a reaction on a DM message. */
+export interface RoomDmReactPayload {
+    requestId?: string;
+    conversationId?: string;
+    username?: string;
+    messageId: string;
+    emoji: string;
+    op: "add" | "remove";
+}
+/** Server → both participants: a DM message's aggregated reactions changed. */
+export interface RoomDmReactionUpdatedPayload {
+    conversationId: string;
+    messageId: string;
+    reactions: Array<{
+        emoji: string;
+        users: string[];
+    }>;
+    participant: RoomDmParticipant;
 }
 export interface RoomDmReadPayload {
     requestId?: string;
@@ -780,7 +857,7 @@ export type RoomClientMessage = {
     payload: {
         room: string;
         text?: string;
-        attachments?: RoomAttachment[];
+        attachments?: RoomAttachmentInput[];
         inReplyTo?: number;
         /** Post directly into a topic; the room's linear stream is unaffected. */
         topicId?: string;
@@ -975,6 +1052,18 @@ export type RoomClientMessage = {
     type: typeof RoomClientMessageType.DM_READ;
     payload: RoomDmReadPayload;
     timestamp?: number;
+} | {
+    type: typeof RoomClientMessageType.DM_EDIT;
+    payload: RoomDmEditPayload;
+    timestamp?: number;
+} | {
+    type: typeof RoomClientMessageType.DM_DELETE;
+    payload: RoomDmDeletePayload;
+    timestamp?: number;
+} | {
+    type: typeof RoomClientMessageType.DM_REACT;
+    payload: RoomDmReactPayload;
+    timestamp?: number;
 } | {
     type: typeof RoomClientMessageType.TOPIC_CREATE;
     payload: RoomTopicCreatePayload;
@@ -1165,6 +1254,18 @@ export type RoomServerMessage = {
     type: typeof RoomServerMessageType.DM_INBOX_UPDATED;
     payload: RoomDmInboxUpdatedPayload;
     timestamp: number;
+} | {
+    type: typeof RoomServerMessageType.DM_MESSAGE_EDITED;
+    payload: RoomDmMessageEditedPayload;
+    timestamp: number;
+} | {
+    type: typeof RoomServerMessageType.DM_MESSAGE_DELETED;
+    payload: RoomDmMessageDeletedPayload;
+    timestamp: number;
+} | {
+    type: typeof RoomServerMessageType.DM_REACTION_UPDATED;
+    payload: RoomDmReactionUpdatedPayload;
+    timestamp: number;
 } | {
     type: typeof RoomServerMessageType.TOPIC;
     payload: RoomTopicResultPayload;

package/dist/shared/rooms-protocol.js

@@ -38,6 +38,9 @@ export const RoomClientMessageType = {
     DM_HISTORY: "DM_HISTORY",
     DM_SEND: "DM_SEND",
     DM_READ: "DM_READ",
+    DM_EDIT: "DM_EDIT",
+    DM_DELETE: "DM_DELETE",
+    DM_REACT: "DM_REACT",
     TOPIC_CREATE: "TOPIC_CREATE",
     TOPIC_RENAME: "TOPIC_RENAME",
     TOPIC_MOVE: "TOPIC_MOVE",
@@ -86,6 +89,9 @@ export const RoomServerMessageType = {
     DM_HISTORY: "DM_HISTORY",
     DM_MESSAGE: "DM_MESSAGE",
     DM_INBOX_UPDATED: "DM_INBOX_UPDATED",
+    DM_MESSAGE_EDITED: "DM_MESSAGE_EDITED",
+    DM_MESSAGE_DELETED: "DM_MESSAGE_DELETED",
+    DM_REACTION_UPDATED: "DM_REACTION_UPDATED",
     TOPIC: "TOPIC",
     TOPICS: "TOPICS",
     TOPIC_UPDATED: "TOPIC_UPDATED",

package/dist/social-client.d.ts

@@ -1,5 +1,8 @@
 import type { RoomDmConversation, RoomDmHistory, RoomDmSendResult, RoomDmUnreadConversation, RoomDoc, RoomDocAttribution, RoomDocChanges, RoomDocConflictHead, RoomDocEditingLease, RoomDocProvenance, RoomDocRevision, RoomDocRunRevertResult, RoomDocWriteResult, RoomFollow, RoomFollowResult, RoomFriend, RoomFriendRequests, RoomPublicProfile, RoomRepliesReadResult, RoomRepliesResult, RoomSocialConfig, RoomSpaceRestorePlan, RoomSpaceRestoreReceipt, RoomSuggestion, RoomSuggestionRequest } from "./social-types.js";
 export type { RoomAttachment, RoomDmConversation, RoomDmHistory, RoomDmMessage, RoomDmParticipant, RoomDmSendResult, RoomDmUnreadConversation, RoomDocAttribution, RoomDocEditingLease, RoomDocMergeRegion, RoomDocRevisionSource, RoomDocRunRevertResult, RoomFollow, RoomFollowResult, RoomFriend, RoomFriendRequest, RoomFriendRequests, RoomPublicProfile, RoomRepliesReadResult, RoomRepliesResult, RoomReplyInboxItem, RoomSocialConfig, RoomSpaceRestoreAction, RoomSpaceRestoreActionKind, RoomSpaceRestorePlan, RoomSpaceRestoreReceipt, RoomSpaceRestoreSummary, RoomSuggestion, RoomSuggestionIntent, RoomSuggestionRequest, RoomSuggestionSource, } from "./social-types.js";
+/** Largest per-file size any tier accepts (plus tier). The server enforces
+ *  the per-tier caps (free 10MB/file, plus 25MB/file) and daily quotas; this
+ *  constant only pre-flights uploads no tier could ever accept. */
 export declare const ROOM_ATTACHMENT_MAX_BYTES: number;
 export declare class RoomSocialError extends Error {
     readonly name = "RoomSocialError";
@@ -175,6 +178,12 @@ export interface RoomSpaceMember {
     /** Named identity roles (RoomSpaceRole.roleId). */
     roleIds?: string[];
     joinedAt?: string;
+    /** The member's handle/username, resolved server-side from their room
+     *  memberships. Absent when the store couldn't resolve a real name (never
+     *  the raw userId). */
+    handle?: string;
+    /** Per-space display name; null or absent means the account username. */
+    nickname?: string | null;
 }
 export declare function getUserPrefs(config: RoomSocialConfig): Promise<Record<string, unknown>>;
 /** Whole-blob replace (16KB cap server-side; last writer wins). */
@@ -321,6 +330,8 @@ export declare function removeSpaceMember(config: RoomSocialConfig, spaceId: str
     removed?: boolean;
 }>;
 export declare function changeSpaceMemberRole(config: RoomSocialConfig, spaceId: string, targetUserId: string, role: "admin" | "member"): Promise<RoomSpaceMember>;
+/** Set (string) or clear (null) a member's per-space nickname; the store validates and enforces uniqueness. */
+export declare function setSpaceMemberNickname(config: RoomSocialConfig, spaceId: string, targetUserId: string, nickname: string | null): Promise<RoomSpaceMember>;
 export declare function createRoomSpace(config: RoomSocialConfig, input: {
     name: string;
     access?: "open" | "invite";
@@ -329,7 +340,10 @@ export declare function restoreRoomDoc(config: RoomSocialConfig, docId: string,
     note?: string;
     asAgent?: boolean;
 }): Promise<RoomDoc>;
-export declare function getRoomAttachmentUrl(config: RoomSocialConfig, room: string, key: string): Promise<{
+export declare function getRoomAttachmentUrl(config: RoomSocialConfig, room: string, key: string, opts?: {
+    name?: string;
+    download?: boolean;
+}): Promise<{
     url: string;
     expiresAt: string | null;
 }>;
@@ -355,6 +369,7 @@ export declare function socialRequest<T>(config: RoomSocialConfig, path: string,
     body?: unknown;
     signal?: AbortSignal;
     formData?: FormData;
+    headers?: Record<string, string>;
 }): Promise<T>;
 export declare function cleanUsername(username: string): string;
 export declare function cleanRoomId(room: string): string;

package/dist/social-client.js

@@ -1,6 +1,9 @@
 import { resolveRoomsWsUrl } from "./client.js";
 import { envString, ROOM_CHAT_API_URL } from "./endpoints.js";
-export const ROOM_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+/** Largest per-file size any tier accepts (plus tier). The server enforces
+ *  the per-tier caps (free 10MB/file, plus 25MB/file) and daily quotas; this
+ *  constant only pre-flights uploads no tier could ever accept. */
+export const ROOM_ATTACHMENT_MAX_BYTES = 25 * 1024 * 1024;
 export class RoomSocialError extends Error {
     name = "RoomSocialError";
     status;
@@ -501,6 +504,11 @@ export async function changeSpaceMemberRole(config, spaceId, targetUserId, role)
     const result = await socialRequest(config, `/spaces/${encodeURIComponent(spaceId)}/members/${encodeURIComponent(targetUserId)}/role`, { method: "PATCH", body: { role } });
     return result.member;
 }
+/** Set (string) or clear (null) a member's per-space nickname; the store validates and enforces uniqueness. */
+export async function setSpaceMemberNickname(config, spaceId, targetUserId, nickname) {
+    const result = await socialRequest(config, `/spaces/${encodeURIComponent(spaceId)}/members/${encodeURIComponent(targetUserId)}/nickname`, { method: "PATCH", body: { nickname } });
+    return result.member;
+}
 export async function createRoomSpace(config, input) {
     const result = await socialRequest(config, "/spaces", {
         method: "POST",
@@ -512,9 +520,22 @@ export async function restoreRoomDoc(config, docId, input = {}) {
     const result = await socialRequest(config, `/docs/${encodeURIComponent(docId)}/restore`, { method: "POST", body: input });
     return result.doc;
 }
-export async function getRoomAttachmentUrl(config, room, key) {
+export async function getRoomAttachmentUrl(config, room, key, opts = {}) {
+    // The object key identifies the object and stays in the query. The
+    // download filename and force-download flag ride REQUEST HEADERS, never
+    // the URL: a private-room filename in the query string leaked into the
+    // relay's access logs and error telemetry (Morgan, Sentry).
     const params = new URLSearchParams({ key });
-    const result = await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/attachment-url?${params.toString()}`, { method: "GET" });
+    const headers = {};
+    // Percent-encode the name: Fetch/HTTP header values are byte strings, so a
+    // raw Unicode filename (报告.py, an emoji) throws a TypeError before the
+    // request is sent. The store decodes with decodeURIComponent.
+    if (opts.name)
+        headers["X-Om-Download-Name"] = encodeURIComponent(opts.name);
+    // Forces a Content-Disposition attachment even for inline mimes.
+    if (opts.download)
+        headers["X-Om-Download"] = "1";
+    const result = await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/attachment-url?${params.toString()}`, { method: "GET", headers });
     if (!result.url) {
         throw new RoomSocialError("Attachment sign failed", 502, result);
     }
@@ -582,6 +603,7 @@ export async function socialRequest(config, path, init = {}) {
             Authorization: `Bearer ${config.apiKey}`,
             Accept: "application/json",
             ...(hasJsonBody ? { "Content-Type": "application/json" } : {}),
+            ...(init.headers ?? {}),
         },
         ...(hasJsonBody
             ? { body: JSON.stringify(init.body) }
@@ -653,6 +675,63 @@ function requestPath(url) {
 function trimTrailingSlash(value) {
     return value.replace(/\/+$/, "");
 }
+/** Source/config/text extensions declared as text/plain so the server's
+ *  UTF-8 code-file lane accepts them. Markup extensions the server
+ *  blocklists (html, svg, xml, ...) are deliberately absent: they fall
+ *  through to application/octet-stream and the server rejects them. */
+const CODE_TEXT_EXTENSIONS = new Set([
+    "js",
+    "jsx",
+    "ts",
+    "tsx",
+    "py",
+    "rb",
+    "go",
+    "rs",
+    "java",
+    "c",
+    "h",
+    "cc",
+    "cpp",
+    "hpp",
+    "cs",
+    "php",
+    "sh",
+    "bash",
+    "zsh",
+    "fish",
+    "ps1",
+    "sql",
+    "yaml",
+    "yml",
+    "toml",
+    "ini",
+    "cfg",
+    "conf",
+    "log",
+    "diff",
+    "patch",
+    "tex",
+    "r",
+    "jl",
+    "kt",
+    "kts",
+    "swift",
+    "scala",
+    "clj",
+    "cljs",
+    "ex",
+    "exs",
+    "erl",
+    "lua",
+    "pl",
+    "pm",
+    "dart",
+    "gradle",
+    "properties",
+    "bat",
+    "cmd",
+]);
 export function mimeFromFilename(filename) {
     const lower = filename.toLowerCase();
     if (lower.endsWith(".png"))
@@ -663,6 +742,10 @@ export function mimeFromFilename(filename) {
         return "image/webp";
     if (lower.endsWith(".gif"))
         return "image/gif";
+    if (lower.endsWith(".mp4"))
+        return "video/mp4";
+    if (lower.endsWith(".webm"))
+        return "video/webm";
     if (lower.endsWith(".pdf"))
         return "application/pdf";
     if (lower.endsWith(".txt"))
@@ -682,5 +765,8 @@ export function mimeFromFilename(filename) {
     if (lower.endsWith(".pptx")) {
         return "application/vnd.openxmlformats-officedocument.presentationml.presentation";
     }
+    const dot = lower.lastIndexOf(".");
+    if (dot !== -1 && CODE_TEXT_EXTENSIONS.has(lower.slice(dot + 1)))
+        return "text/plain";
     return "application/octet-stream";
 }

package/dist/social-types.d.ts

@@ -44,16 +44,26 @@ export interface RoomFollowResult {
     isNewFollow?: boolean;
 }
 export interface RoomAttachment {
-    /** Object key under room-attachments/; clients sign it at render time. */
-    key: string;
+    /**
+     * Object key under room-attachments/; clients sign it at render time.
+     * Absent while scanStatus is "pending" on entries served to members: the
+     * store withholds the signable key until the scan clears, so render the
+     * metadata as a placeholder and do not attempt signing without a key.
+     */
+    key?: string | undefined;
     name: string;
     size: number;
     mime: string;
     scanStatus?: "pending" | "clean" | "held" | undefined;
 }
 export interface RoomAttachmentUpload {
-    /** The stored attachment plus its first signed URL, for immediate render. */
+    /**
+     * The stored attachment plus its first signed URL, for immediate render.
+     * The uploader always receives the key; only member views of PENDING
+     * entries withhold it.
+     */
     attachment: RoomAttachment & {
+        key: string;
         url: string;
         expiresAt: string | null;
     };
@@ -112,6 +122,14 @@ export interface RoomDmMessage {
     /** Sealed DM: content is '' and the opaque envelope rides here. */
     secret?: RoomLedgerSecretPayload | null;
     metadata?: Record<string, unknown>;
+    /** DM image: a private dm-attachments/ key (signed on render) or a legacy
+     *  public URL. Additive — old messages carry none. */
+    imageUrl?: string | null;
+    /** Aggregated reactions (per-emoji userId lists). Additive. */
+    reactions?: Array<{
+        emoji: string;
+        users: string[];
+    }>;
 }
 export interface RoomDmHistory {
     conversationId: string;

package/dist/types.d.ts

@@ -1,2 +1,2 @@
-export type { RoomAccessMode, RoomAttachment, RoomAuditEntry, RoomAuditLogPayload, RoomAuditLogRequestPayload, RoomAuthSuccessPayload, RoomBackfillPayload, RoomClientMessage, RoomCreatedPayload, RoomCreatePayload, RoomDmHistoryPayload, RoomDmHistoryResultPayload, RoomDmInboxUpdatedPayload, RoomDmMessage, RoomDmMessagePayload, RoomDmOpenedPayload, RoomDmOpenPayload, RoomDmParticipant, RoomDmReadPayload, RoomDmSendPayload, RoomEntryUpdatedPayload, RoomErrorPayload, RoomFriendPresence, RoomInvitedPayload, RoomInvitePayload, RoomLedgerEntry, RoomMember, RoomMemberRemovedPayload, RoomMemberRoleChangedPayload, RoomMemberTier, RoomMessagePayload, RoomMeta, RoomModerateMemberPayload, RoomMutedPayload, RoomPinsPayload, RoomPresenceDeltaPayload, RoomPresencePayload, RoomReactorsPayload, RoomReadStatePayload, RoomRemoveMemberPayload, RoomReportedPayload, RoomReportPayload, RoomResyncPayload, RoomRole, RoomRoleChangePayload, RoomSearchPayload, RoomSearchResultsPayload, RoomSearchScope, RoomServerMessage, RoomServerMessageOf, RoomSetReadOnlyPayload, RoomSpace, RoomSpaceJoinedPayload, RoomSpacesPayload, RoomThreadPayload, RoomTopic, RoomTopicAttention, RoomTopicBucketState, RoomTopicCreatePayload, RoomTopicListPayload, RoomTopicMergePayload, RoomTopicMovePayload, RoomTopicRenamePayload, RoomTopicResolvePayload, RoomTopicResultPayload, RoomTopicSetAttentionPayload, RoomTopicsPolicy, RoomTopicsResultPayload, RoomTopicUpdatedPayload, RoomTypingPayload, RoomUserStatus, RoomWhoPayload, } from "./shared/rooms-protocol.js";
+export type { RoomAccessMode, RoomAttachment, RoomAttachmentInput, RoomAuditEntry, RoomAuditLogPayload, RoomAuditLogRequestPayload, RoomAuthSuccessPayload, RoomBackfillPayload, RoomClientMessage, RoomCreatedPayload, RoomCreatePayload, RoomDmHistoryPayload, RoomDmHistoryResultPayload, RoomDmInboxUpdatedPayload, RoomDmMessage, RoomDmMessagePayload, RoomDmOpenedPayload, RoomDmOpenPayload, RoomDmParticipant, RoomDmReadPayload, RoomDmSendPayload, RoomEntryUpdatedPayload, RoomErrorPayload, RoomFriendPresence, RoomInvitedPayload, RoomInvitePayload, RoomLedgerEntry, RoomMember, RoomMemberRemovedPayload, RoomMemberRoleChangedPayload, RoomMemberTier, RoomMessagePayload, RoomMeta, RoomModerateMemberPayload, RoomMutedPayload, RoomPinsPayload, RoomPresenceDeltaPayload, RoomPresencePayload, RoomReactorsPayload, RoomReadStatePayload, RoomRemoveMemberPayload, RoomReportedPayload, RoomReportPayload, RoomResyncPayload, RoomRole, RoomRoleChangePayload, RoomSearchPayload, RoomSearchResultsPayload, RoomSearchScope, RoomServerMessage, RoomServerMessageOf, RoomSetReadOnlyPayload, RoomSpace, RoomSpaceJoinedPayload, RoomSpacesPayload, RoomThreadPayload, RoomTopic, RoomTopicAttention, RoomTopicBucketState, RoomTopicCreatePayload, RoomTopicListPayload, RoomTopicMergePayload, RoomTopicMovePayload, RoomTopicRenamePayload, RoomTopicResolvePayload, RoomTopicResultPayload, RoomTopicSetAttentionPayload, RoomTopicsPolicy, RoomTopicsResultPayload, RoomTopicUpdatedPayload, RoomTypingPayload, RoomUserStatus, RoomWhoPayload, } from "./shared/rooms-protocol.js";
 export { applyRoomPresenceDelta, isSystemRoomLedgerEntryType, ROOM_PRESENCE_SAMPLE_LIMIT, RoomClientMessageType, RoomLedgerEntryType, RoomServerMessageType, SUPPORTED_ROOM_PROTOCOL_VERSION, } from "./shared/rooms-protocol.js";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.5.0";
-export declare const RUNNER_VERSION = "0.5.0";
+export declare const VERSION = "0.5.1";
+export declare const RUNNER_VERSION = "0.5.1";

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "0.5.0";
-export const RUNNER_VERSION = "0.5.0";
+export const VERSION = "0.5.1";
+export const RUNNER_VERSION = "0.5.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openmarket/rooms-client",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "OM Rooms protocol client: wire types, WebSocket + REST clients, and chat view-models. Browser-safe (no node:/bun: imports).",
   "type": "module",
   "license": "Apache-2.0",

package/src/agent/armed-mode.ts

@@ -126,15 +126,49 @@ export function makeArmedRoomState(roomId: string, lastSeq = 0): ArmedRoomState
   };
 }
 
+/**
+ * A fresh armed state that CARRIES the cost/rate counters from a prior armed
+ * session of the same room. Disarm/rearm must not zero the cooldown, hourly
+ * window, or session budget: otherwise toggling /disarm + /arm bypasses every
+ * cost guard. Error and chain counters DO reset (rearming is an explicit
+ * operator action; a fresh process still starts with nothing retained).
+ */
+export function rearmedRoomState(
+  roomId: string,
+  retired: ArmedRoomState | null,
+  lastSeq = 0,
+): ArmedRoomState {
+  const state = makeArmedRoomState(roomId, lastSeq);
+  if (!retired || retired.roomId !== roomId) return state;
+  state.postTimes = [...retired.postTimes];
+  state.postsThisSession = retired.postsThisSession;
+  state.tokensThisSession = retired.tokensThisSession;
+  return state;
+}
+
+/** Seqs of the user's own posts in a window of entries; the reply-trigger
+ *  check tests `inReplyTo` against this set. Pure. */
+export function ownSeqsOf(entries: ReadonlyArray<RoomLedgerEntry>, ownUserId: string): Set<number> {
+  const seqs = new Set<number>();
+  for (const entry of entries) {
+    if (entry.userId === ownUserId) seqs.add(entry.seq);
+  }
+  return seqs;
+}
+
 /**
  * Whether a single incoming entry is a qualifying TRIGGER: a NEW human POST in
- * the room that @mentions the user's own handle. Agent posts, system entries,
- * the user's own posts, and non-mentions never trigger. Pure.
+ * the room that @mentions the user's own handle, OR (when `ownSeqs` is given)
+ * directly replies to one of the user's own messages. Reply semantics match a
+ * mention (replying pings the author), so armed mode treats both as addressed
+ * to the user. Agent posts, system entries, the user's own posts, and
+ * non-mentions never trigger. Pure.
  */
 export function isTriggeringEntry(
   entry: RoomLedgerEntry,
   ownHandle: string,
   ownUserId: string,
+  ownSeqs?: ReadonlySet<number>,
 ): boolean {
   if (entry.type !== RoomLedgerEntryType.POST) return false;
   if (entry.isAgent) return false;
@@ -144,6 +178,9 @@ export function isTriggeringEntry(
   const me = normalizeHandle(ownHandle).toLowerCase();
   if (entry.userId === ownUserId) return false;
   if (me.length > 0 && fromHandle === me) return false;
+  // A direct reply to one of our messages is addressed to us. The set only
+  // spans the cached window, so replies to long-scrolled-out posts stay inert.
+  if (entry.inReplyTo !== undefined && ownSeqs?.has(entry.inReplyTo)) return true;
   // Must EXPLICITLY @mention the user's own handle. A bare-substring match (the
   // old mentionsAgent) fired on ordinary words for short handles like "may" /
   // "btc"; armed posting has no human review, so it triggers ONLY on an `@handle`
@@ -154,18 +191,22 @@ export function isTriggeringEntry(
 /**
  * The newest qualifying trigger among entries strictly newer than
  * `afterSeq`, or null if none. Used by the loop to decide whether the latest
- * batch of room messages contains a reason to act. Pure.
+ * batch of room messages contains a reason to act. Reply triggers resolve
+ * against the user's own seqs within `entries` unless a wider `ownSeqs`
+ * window is supplied (the live single-entry path passes the room cache).
+ * Pure.
  */
 export function findTrigger(
   entries: ReadonlyArray<RoomLedgerEntry>,
   ownHandle: string,
   ownUserId: string,
   afterSeq: number,
+  ownSeqs: ReadonlySet<number> = ownSeqsOf(entries, ownUserId),
 ): RoomLedgerEntry | null {
   let found: RoomLedgerEntry | null = null;
   for (const entry of entries) {
     if (entry.seq <= afterSeq) continue;
-    if (isTriggeringEntry(entry, ownHandle, ownUserId)) found = entry;
+    if (isTriggeringEntry(entry, ownHandle, ownUserId, ownSeqs)) found = entry;
   }
   return found;
 }

package/src/client.ts

@@ -7,7 +7,7 @@ import { authFromApiKey } from "./jwt.js";
 import { consumeRoomSuggestionAttribution } from "./suggestion-attribution.js";
 import {
   type RoomAccessMode,
-  type RoomAttachment,
+  type RoomAttachmentInput,
   type RoomAuditLogPayload,
   type RoomAuthSuccessPayload,
   type RoomBackfillPayload,
@@ -82,7 +82,7 @@ export interface RoomJoinOptions {
 
 export interface RoomSayOptions extends RoomJoinOptions {
   text?: string;
-  attachments?: RoomAttachment[];
+  attachments?: RoomAttachmentInput[];
   inReplyTo?: number;
   /** Post directly into a topic; the room's linear stream is unaffected. */
   topicId?: string;
@@ -261,7 +261,9 @@ export interface RoomJoinedSession {
   client: RoomWsClient;
 }
 
-function toRoomAttachmentPayloads(attachments: readonly RoomAttachment[]): RoomAttachment[] {
+function toRoomAttachmentPayloads(
+  attachments: readonly RoomAttachmentInput[],
+): RoomAttachmentInput[] {
   return attachments.map(({ key, name, size, mime }) => ({ key, name, size, mime }));
 }
 
@@ -284,6 +286,10 @@ export interface RoomDmSendRequest {
   conversationId?: string;
   content: string;
   clientMsgId?: string;
+  /** A private DM-attachment key (dm-attachments/…) or a legacy public image
+   *  URL. Stored on the message's imageUrl; the client signs keys on render.
+   *  Additive — omitted for text-only sends. */
+  imageUrl?: string;
 }
 
 export interface RoomThreadRequest {
@@ -931,6 +937,7 @@ export async function sendRoomDmOnClient(
       clientMsgId,
       ...(request.username ? { username: request.username } : {}),
       ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+      ...(request.imageUrl ? { imageUrl: request.imageUrl } : {}),
     },
     timestamp: Date.now(),
   });
@@ -946,6 +953,64 @@ export async function sendRoomDmOnClient(
   return sent.payload;
 }
 
+/** Edit one of my DM messages. Fire-and-forget over the WS; the relay fans out
+ *  DM_MESSAGE_EDITED to both participants. */
+export function editRoomDmOnClient(
+  client: RoomWsClient,
+  request: { conversationId?: string; username?: string; messageId: string; content: string },
+): void {
+  client.send({
+    type: RoomClientMessageType.DM_EDIT,
+    payload: {
+      messageId: request.messageId,
+      content: request.content,
+      ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+      ...(request.username ? { username: request.username } : {}),
+    },
+    timestamp: Date.now(),
+  });
+}
+
+/** Soft-delete one of my DM messages. The relay fans out DM_MESSAGE_DELETED. */
+export function deleteRoomDmOnClient(
+  client: RoomWsClient,
+  request: { conversationId?: string; username?: string; messageId: string },
+): void {
+  client.send({
+    type: RoomClientMessageType.DM_DELETE,
+    payload: {
+      messageId: request.messageId,
+      ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+      ...(request.username ? { username: request.username } : {}),
+    },
+    timestamp: Date.now(),
+  });
+}
+
+/** Toggle a reaction on a DM message. The relay fans out DM_REACTION_UPDATED. */
+export function reactRoomDmOnClient(
+  client: RoomWsClient,
+  request: {
+    conversationId?: string;
+    username?: string;
+    messageId: string;
+    emoji: string;
+    op: "add" | "remove";
+  },
+): void {
+  client.send({
+    type: RoomClientMessageType.DM_REACT,
+    payload: {
+      messageId: request.messageId,
+      emoji: request.emoji,
+      op: request.op,
+      ...(request.conversationId ? { conversationId: request.conversationId } : {}),
+      ...(request.username ? { username: request.username } : {}),
+    },
+    timestamp: Date.now(),
+  });
+}
+
 export async function peekRoom(
   config: RoomClientConfig,
   options: RoomPeekOptions,
@@ -1087,7 +1152,7 @@ export function postRoomMessage(
   room: string,
   text: string,
   inReplyTo?: number,
-  attachments?: RoomAttachment[],
+  attachments?: RoomAttachmentInput[],
   topicId?: string,
 ): string {
   const clientMsgId = randomUUID();

package/src/shared/rooms-protocol.ts

@@ -38,6 +38,9 @@ export const RoomClientMessageType = {
   DM_HISTORY: "DM_HISTORY",
   DM_SEND: "DM_SEND",
   DM_READ: "DM_READ",
+  DM_EDIT: "DM_EDIT",
+  DM_DELETE: "DM_DELETE",
+  DM_REACT: "DM_REACT",
   TOPIC_CREATE: "TOPIC_CREATE",
   TOPIC_RENAME: "TOPIC_RENAME",
   TOPIC_MOVE: "TOPIC_MOVE",
@@ -90,6 +93,9 @@ export const RoomServerMessageType = {
   DM_HISTORY: "DM_HISTORY",
   DM_MESSAGE: "DM_MESSAGE",
   DM_INBOX_UPDATED: "DM_INBOX_UPDATED",
+  DM_MESSAGE_EDITED: "DM_MESSAGE_EDITED",
+  DM_MESSAGE_DELETED: "DM_MESSAGE_DELETED",
+  DM_REACTION_UPDATED: "DM_REACTION_UPDATED",
   TOPIC: "TOPIC",
   TOPICS: "TOPICS",
   TOPIC_UPDATED: "TOPIC_UPDATED",
@@ -240,14 +246,27 @@ export interface RoomLedgerEntry {
 }
 
 export interface RoomAttachment {
-  /** Object key under room-attachments/; clients sign it at render time. */
-  key: string;
+  /**
+   * Object key under room-attachments/; clients sign it at render time.
+   * Absent while scanStatus is "pending" on entries served to members: the
+   * store withholds the signable key until the scan clears, so render the
+   * metadata as a placeholder and do not attempt signing without a key.
+   */
+  key?: string | undefined;
   name: string;
   size: number;
   mime: string;
   scanStatus?: "pending" | "clean" | "held" | undefined;
 }
 
+/**
+ * A postable attachment reference. Outbound frames must always carry the
+ * stored key (senders reference their own uploads, which include it); only
+ * read views of pending entries may be keyless, and those must never be
+ * forwarded back into a post.
+ */
+export type RoomAttachmentInput = RoomAttachment & { key: string };
+
 /**
  * A registry-backed topic inside a channel. The id is permanent: rename
  * changes `name` only, and links (`om://topic/<topicId>`) keep resolving.
@@ -527,6 +546,11 @@ export interface RoomDmMessage {
   /** Sealed DM: content is '' and the opaque envelope rides here. */
   secret?: RoomLedgerSecretPayload | null | undefined;
   metadata?: Record<string, unknown> | undefined;
+  /** Legacy public chat-image URL (renders as-is, no signing). */
+  imageUrl?: string | null | undefined;
+  /** Private, signed, scanned DM attachments (dm-attachments/ keyspace).
+   *  Additive: old messages carry none and render unchanged. */
+  attachments?: RoomAttachment[] | undefined;
 }
 
 export interface RoomDmOpenPayload {
@@ -551,6 +575,61 @@ export interface RoomDmSendPayload {
   conversationId?: string;
   content: string;
   clientMsgId?: string;
+  /** DM-attachment key or legacy public image URL; stored on the message's
+   *  imageUrl. Additive — text-only sends omit it. */
+  imageUrl?: string;
+}
+
+/** Client → server: edit one of my DM messages (sealed messages are rejected). */
+export interface RoomDmEditPayload {
+  requestId?: string;
+  conversationId?: string;
+  username?: string;
+  messageId: string;
+  content: string;
+}
+
+/** Client → server: soft-delete one of my DM messages (tombstone in place). */
+export interface RoomDmDeletePayload {
+  requestId?: string;
+  conversationId?: string;
+  username?: string;
+  messageId: string;
+}
+
+/** Server → both participants: a DM message was edited. */
+export interface RoomDmMessageEditedPayload {
+  conversationId: string;
+  messageId: string;
+  content: string;
+  editedAt: string | number;
+  participant: RoomDmParticipant;
+}
+
+/** Server → both participants: a DM message was soft-deleted (tombstone). */
+export interface RoomDmMessageDeletedPayload {
+  conversationId: string;
+  messageId: string;
+  deletedAt: string | number;
+  participant: RoomDmParticipant;
+}
+
+/** Client → server: toggle a reaction on a DM message. */
+export interface RoomDmReactPayload {
+  requestId?: string;
+  conversationId?: string;
+  username?: string;
+  messageId: string;
+  emoji: string;
+  op: "add" | "remove";
+}
+
+/** Server → both participants: a DM message's aggregated reactions changed. */
+export interface RoomDmReactionUpdatedPayload {
+  conversationId: string;
+  messageId: string;
+  reactions: Array<{ emoji: string; users: string[] }>;
+  participant: RoomDmParticipant;
 }
 
 export interface RoomDmReadPayload {
@@ -902,7 +981,7 @@ export type RoomClientMessage =
       payload: {
         room: string;
         text?: string;
-        attachments?: RoomAttachment[];
+        attachments?: RoomAttachmentInput[];
         inReplyTo?: number;
         /** Post directly into a topic; the room's linear stream is unaffected. */
         topicId?: string;
@@ -1085,6 +1164,21 @@ export type RoomClientMessage =
       payload: RoomDmReadPayload;
       timestamp?: number;
     }
+  | {
+      type: typeof RoomClientMessageType.DM_EDIT;
+      payload: RoomDmEditPayload;
+      timestamp?: number;
+    }
+  | {
+      type: typeof RoomClientMessageType.DM_DELETE;
+      payload: RoomDmDeletePayload;
+      timestamp?: number;
+    }
+  | {
+      type: typeof RoomClientMessageType.DM_REACT;
+      payload: RoomDmReactPayload;
+      timestamp?: number;
+    }
   | {
       type: typeof RoomClientMessageType.TOPIC_CREATE;
       payload: RoomTopicCreatePayload;
@@ -1317,6 +1411,21 @@ export type RoomServerMessage =
       payload: RoomDmInboxUpdatedPayload;
       timestamp: number;
     }
+  | {
+      type: typeof RoomServerMessageType.DM_MESSAGE_EDITED;
+      payload: RoomDmMessageEditedPayload;
+      timestamp: number;
+    }
+  | {
+      type: typeof RoomServerMessageType.DM_MESSAGE_DELETED;
+      payload: RoomDmMessageDeletedPayload;
+      timestamp: number;
+    }
+  | {
+      type: typeof RoomServerMessageType.DM_REACTION_UPDATED;
+      payload: RoomDmReactionUpdatedPayload;
+      timestamp: number;
+    }
   | {
       type: typeof RoomServerMessageType.TOPIC;
       payload: RoomTopicResultPayload;

package/src/social-client.ts

@@ -62,7 +62,10 @@ export type {
   RoomSuggestionSource,
 } from "./social-types.js";
 
-export const ROOM_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+/** Largest per-file size any tier accepts (plus tier). The server enforces
+ *  the per-tier caps (free 10MB/file, plus 25MB/file) and daily quotas; this
+ *  constant only pre-flights uploads no tier could ever accept. */
+export const ROOM_ATTACHMENT_MAX_BYTES = 25 * 1024 * 1024;
 
 export class RoomSocialError extends Error {
   override readonly name = "RoomSocialError";
@@ -658,6 +661,12 @@ export interface RoomSpaceMember {
   /** Named identity roles (RoomSpaceRole.roleId). */
   roleIds?: string[];
   joinedAt?: string;
+  /** The member's handle/username, resolved server-side from their room
+   *  memberships. Absent when the store couldn't resolve a real name (never
+   *  the raw userId). */
+  handle?: string;
+  /** Per-space display name; null or absent means the account username. */
+  nickname?: string | null;
 }
 
 export async function getUserPrefs(config: RoomSocialConfig): Promise<Record<string, unknown>> {
@@ -1048,6 +1057,21 @@ export async function changeSpaceMemberRole(
   return result.member;
 }
 
+/** Set (string) or clear (null) a member's per-space nickname; the store validates and enforces uniqueness. */
+export async function setSpaceMemberNickname(
+  config: RoomSocialConfig,
+  spaceId: string,
+  targetUserId: string,
+  nickname: string | null,
+): Promise<RoomSpaceMember> {
+  const result = await socialRequest<{ member: RoomSpaceMember }>(
+    config,
+    `/spaces/${encodeURIComponent(spaceId)}/members/${encodeURIComponent(targetUserId)}/nickname`,
+    { method: "PATCH", body: { nickname } },
+  );
+  return result.member;
+}
+
 export async function createRoomSpace(
   config: RoomSocialConfig,
   input: { name: string; access?: "open" | "invite" },
@@ -1076,12 +1100,24 @@ export async function getRoomAttachmentUrl(
   config: RoomSocialConfig,
   room: string,
   key: string,
+  opts: { name?: string; download?: boolean } = {},
 ): Promise<{ url: string; expiresAt: string | null }> {
+  // The object key identifies the object and stays in the query. The
+  // download filename and force-download flag ride REQUEST HEADERS, never
+  // the URL: a private-room filename in the query string leaked into the
+  // relay's access logs and error telemetry (Morgan, Sentry).
   const params = new URLSearchParams({ key });
+  const headers: Record<string, string> = {};
+  // Percent-encode the name: Fetch/HTTP header values are byte strings, so a
+  // raw Unicode filename (报告.py, an emoji) throws a TypeError before the
+  // request is sent. The store decodes with decodeURIComponent.
+  if (opts.name) headers["X-Om-Download-Name"] = encodeURIComponent(opts.name);
+  // Forces a Content-Disposition attachment even for inline mimes.
+  if (opts.download) headers["X-Om-Download"] = "1";
   const result = await socialRequest<{ url?: string; expiresAt?: string | null }>(
     config,
     `/rooms/${encodeURIComponent(cleanRoomId(room))}/attachment-url?${params.toString()}`,
-    { method: "GET" },
+    { method: "GET", headers },
   );
   if (!result.url) {
     throw new RoomSocialError("Attachment sign failed", 502, result);
@@ -1174,6 +1210,7 @@ export async function socialRequest<T>(
     body?: unknown;
     signal?: AbortSignal;
     formData?: FormData;
+    headers?: Record<string, string>;
   } = {},
 ): Promise<T> {
   const url = `${trimTrailingSlash(config.apiUrl)}${path}`;
@@ -1184,6 +1221,7 @@ export async function socialRequest<T>(
       Authorization: `Bearer ${config.apiKey}`,
       Accept: "application/json",
       ...(hasJsonBody ? { "Content-Type": "application/json" } : {}),
+      ...(init.headers ?? {}),
     },
     ...(hasJsonBody
       ? { body: JSON.stringify(init.body) }
@@ -1263,12 +1301,72 @@ function trimTrailingSlash(value: string): string {
   return value.replace(/\/+$/, "");
 }
 
+/** Source/config/text extensions declared as text/plain so the server's
+ *  UTF-8 code-file lane accepts them. Markup extensions the server
+ *  blocklists (html, svg, xml, ...) are deliberately absent: they fall
+ *  through to application/octet-stream and the server rejects them. */
+const CODE_TEXT_EXTENSIONS = new Set([
+  "js",
+  "jsx",
+  "ts",
+  "tsx",
+  "py",
+  "rb",
+  "go",
+  "rs",
+  "java",
+  "c",
+  "h",
+  "cc",
+  "cpp",
+  "hpp",
+  "cs",
+  "php",
+  "sh",
+  "bash",
+  "zsh",
+  "fish",
+  "ps1",
+  "sql",
+  "yaml",
+  "yml",
+  "toml",
+  "ini",
+  "cfg",
+  "conf",
+  "log",
+  "diff",
+  "patch",
+  "tex",
+  "r",
+  "jl",
+  "kt",
+  "kts",
+  "swift",
+  "scala",
+  "clj",
+  "cljs",
+  "ex",
+  "exs",
+  "erl",
+  "lua",
+  "pl",
+  "pm",
+  "dart",
+  "gradle",
+  "properties",
+  "bat",
+  "cmd",
+]);
+
 export function mimeFromFilename(filename: string): string {
   const lower = filename.toLowerCase();
   if (lower.endsWith(".png")) return "image/png";
   if (lower.endsWith(".jpg") || lower.endsWith(".jpeg")) return "image/jpeg";
   if (lower.endsWith(".webp")) return "image/webp";
   if (lower.endsWith(".gif")) return "image/gif";
+  if (lower.endsWith(".mp4")) return "video/mp4";
+  if (lower.endsWith(".webm")) return "video/webm";
   if (lower.endsWith(".pdf")) return "application/pdf";
   if (lower.endsWith(".txt")) return "text/plain";
   if (lower.endsWith(".md") || lower.endsWith(".markdown")) return "text/markdown";
@@ -1283,5 +1381,7 @@ export function mimeFromFilename(filename: string): string {
   if (lower.endsWith(".pptx")) {
     return "application/vnd.openxmlformats-officedocument.presentationml.presentation";
   }
+  const dot = lower.lastIndexOf(".");
+  if (dot !== -1 && CODE_TEXT_EXTENSIONS.has(lower.slice(dot + 1))) return "text/plain";
   return "application/octet-stream";
 }

package/src/social-types.ts

@@ -53,8 +53,13 @@ export interface RoomFollowResult {
 }
 
 export interface RoomAttachment {
-  /** Object key under room-attachments/; clients sign it at render time. */
-  key: string;
+  /**
+   * Object key under room-attachments/; clients sign it at render time.
+   * Absent while scanStatus is "pending" on entries served to members: the
+   * store withholds the signable key until the scan clears, so render the
+   * metadata as a placeholder and do not attempt signing without a key.
+   */
+  key?: string | undefined;
   name: string;
   size: number;
   mime: string;
@@ -62,8 +67,16 @@ export interface RoomAttachment {
 }
 
 export interface RoomAttachmentUpload {
-  /** The stored attachment plus its first signed URL, for immediate render. */
-  attachment: RoomAttachment & { url: string; expiresAt: string | null };
+  /**
+   * The stored attachment plus its first signed URL, for immediate render.
+   * The uploader always receives the key; only member views of PENDING
+   * entries withhold it.
+   */
+  attachment: RoomAttachment & {
+    key: string;
+    url: string;
+    expiresAt: string | null;
+  };
 }
 
 export interface RoomPublicProfile {
@@ -126,6 +139,11 @@ export interface RoomDmMessage {
   /** Sealed DM: content is '' and the opaque envelope rides here. */
   secret?: RoomLedgerSecretPayload | null;
   metadata?: Record<string, unknown>;
+  /** DM image: a private dm-attachments/ key (signed on render) or a legacy
+   *  public URL. Additive — old messages carry none. */
+  imageUrl?: string | null;
+  /** Aggregated reactions (per-emoji userId lists). Additive. */
+  reactions?: Array<{ emoji: string; users: string[] }>;
 }
 
 export interface RoomDmHistory {

package/src/types.ts

@@ -1,6 +1,7 @@
 export type {
   RoomAccessMode,
   RoomAttachment,
+  RoomAttachmentInput,
   RoomAuditEntry,
   RoomAuditLogPayload,
   RoomAuditLogRequestPayload,

package/src/version.ts

@@ -1,2 +1,2 @@
-export const VERSION = "0.5.0";
-export const RUNNER_VERSION = "0.5.0";
+export const VERSION = "0.5.1";
+export const RUNNER_VERSION = "0.5.1";