@openmarket/rooms-client 0.2.1 → 0.3.0

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { type RoomAccessMode, type RoomAttachment, type RoomAuditLogPayload, type RoomAuthSuccessPayload, type RoomBackfillPayload, type RoomDmHistoryResultPayload, type RoomDmMessagePayload, type RoomDmOpenedPayload, type RoomFriendPresence, type RoomInvitedPayload, type RoomLedgerEntry, type RoomMemberRemovedPayload, type RoomMemberRoleChangedPayload, type RoomMeta, type RoomPinsPayload, type RoomPresencePayload, type RoomReactorsPayload, type RoomReadStatePayload, type RoomReportedPayload, type RoomRole, type RoomSearchResultsPayload, type RoomSearchScope, type RoomSpace, type RoomThreadPayload, type RoomTopic, type RoomTopicAttention, type RoomTopicResultPayload, type RoomTopicsResultPayload, type RoomUserStatus, type RoomWhoPayload } from "./types.js";
+import { type RoomAccessMode, type RoomAttachmentInput, type RoomAuditLogPayload, type RoomAuthSuccessPayload, type RoomBackfillPayload, type RoomDmHistoryResultPayload, type RoomDmMessagePayload, type RoomDmOpenedPayload, type RoomFriendPresence, type RoomInvitedPayload, type RoomLedgerEntry, type RoomMemberRemovedPayload, type RoomMemberRoleChangedPayload, type RoomMeta, type RoomPinsPayload, type RoomPresencePayload, type RoomReactorsPayload, type RoomReadStatePayload, type RoomReportedPayload, type RoomRole, type RoomSearchResultsPayload, type RoomSearchScope, type RoomSpace, type RoomThreadPayload, type RoomTopic, type RoomTopicAttention, type RoomTopicResultPayload, type RoomTopicsResultPayload, type RoomUserStatus, type RoomWhoPayload } from "./types.js";
 import { type RoomWebSocketCtor, RoomWsClient } from "./ws-client.js";
 export interface RoomClientConfig {
     url: string;
@@ -39,7 +39,7 @@ export interface RoomJoinOptions {
 }
 export interface RoomSayOptions extends RoomJoinOptions {
     text?: string;
-    attachments?: RoomAttachment[];
+    attachments?: RoomAttachmentInput[];
     inReplyTo?: number;
     /** Post directly into a topic; the room's linear stream is unaffected. */
     topicId?: string;
@@ -283,7 +283,7 @@ export declare function joinRoom(config: RoomClientConfig, options: RoomJoinOpti
 /** Re-join a room on an already-connected client (used after a reconnect). */
 export declare function rejoinRoomOnClient(client: RoomWsClient, options: RoomJoinOptions): Promise<RoomBackfillPayload>;
 export declare function attachRejoinOnReconnect(client: RoomWsClient, options: RoomJoinOptions, latestSeq: () => number | undefined, onRejoined?: (backfill: RoomBackfillPayload) => void, onError?: (err: unknown) => void): () => void;
-export declare function postRoomMessage(client: RoomWsClient, room: string, text: string, inReplyTo?: number, attachments?: RoomAttachment[], topicId?: string): string;
+export declare function postRoomMessage(client: RoomWsClient, room: string, text: string, inReplyTo?: number, attachments?: RoomAttachmentInput[], topicId?: string): string;
 export declare function sendRoomTyping(client: RoomWsClient, room: string, state: "start" | "stop"): void;
 export declare function sendRoomStatus(client: RoomWsClient, status: RoomUserStatus, statusText?: string | null): void;
 /**

package/dist/shared/rooms-protocol.d.ts

@@ -217,13 +217,27 @@ export interface RoomLedgerEntry {
     roomRole?: RoomRole | null | undefined;
 }
 export interface RoomAttachment {
-    /** Object key under room-attachments/; clients sign it at render time. */
-    key: string;
+    /**
+     * Object key under room-attachments/; clients sign it at render time.
+     * Absent while scanStatus is "pending" on entries served to members: the
+     * store withholds the signable key until the scan clears, so render the
+     * metadata as a placeholder and do not attempt signing without a key.
+     */
+    key?: string | undefined;
     name: string;
     size: number;
     mime: string;
     scanStatus?: "pending" | "clean" | "held" | undefined;
 }
+/**
+ * A postable attachment reference. Outbound frames must always carry the
+ * stored key (senders reference their own uploads, which include it); only
+ * read views of pending entries may be keyless, and those must never be
+ * forwarded back into a post.
+ */
+export type RoomAttachmentInput = RoomAttachment & {
+    key: string;
+};
 /**
  * A registry-backed topic inside a channel. The id is permanent: rename
  * changes `name` only, and links (`om://topic/<topicId>`) keep resolving.
@@ -843,7 +857,7 @@ export type RoomClientMessage = {
     payload: {
         room: string;
         text?: string;
-        attachments?: RoomAttachment[];
+        attachments?: RoomAttachmentInput[];
         inReplyTo?: number;
         /** Post directly into a topic; the room's linear stream is unaffected. */
         topicId?: string;

package/dist/social-client.d.ts

@@ -1,5 +1,8 @@
 import type { RoomDmConversation, RoomDmHistory, RoomDmSendResult, RoomDmUnreadConversation, RoomDoc, RoomDocAttribution, RoomDocChanges, RoomDocConflictHead, RoomDocEditingLease, RoomDocProvenance, RoomDocRevision, RoomDocRunRevertResult, RoomDocWriteResult, RoomFollow, RoomFollowResult, RoomFriend, RoomFriendRequests, RoomPublicProfile, RoomRepliesReadResult, RoomRepliesResult, RoomSocialConfig, RoomSpaceRestorePlan, RoomSpaceRestoreReceipt, RoomSuggestion, RoomSuggestionRequest } from "./social-types.js";
 export type { RoomAttachment, RoomDmConversation, RoomDmHistory, RoomDmMessage, RoomDmParticipant, RoomDmSendResult, RoomDmUnreadConversation, RoomDocAttribution, RoomDocEditingLease, RoomDocMergeRegion, RoomDocRevisionSource, RoomDocRunRevertResult, RoomFollow, RoomFollowResult, RoomFriend, RoomFriendRequest, RoomFriendRequests, RoomPublicProfile, RoomRepliesReadResult, RoomRepliesResult, RoomReplyInboxItem, RoomSocialConfig, RoomSpaceRestoreAction, RoomSpaceRestoreActionKind, RoomSpaceRestorePlan, RoomSpaceRestoreReceipt, RoomSpaceRestoreSummary, RoomSuggestion, RoomSuggestionIntent, RoomSuggestionRequest, RoomSuggestionSource, } from "./social-types.js";
+/** Largest per-file size any tier accepts (plus tier). The server enforces
+ *  the per-tier caps (free 10MB/file, plus 25MB/file) and daily quotas; this
+ *  constant only pre-flights uploads no tier could ever accept. */
 export declare const ROOM_ATTACHMENT_MAX_BYTES: number;
 export declare class RoomSocialError extends Error {
     readonly name = "RoomSocialError";
@@ -337,7 +340,10 @@ export declare function restoreRoomDoc(config: RoomSocialConfig, docId: string,
     note?: string;
     asAgent?: boolean;
 }): Promise<RoomDoc>;
-export declare function getRoomAttachmentUrl(config: RoomSocialConfig, room: string, key: string): Promise<{
+export declare function getRoomAttachmentUrl(config: RoomSocialConfig, room: string, key: string, opts?: {
+    name?: string;
+    download?: boolean;
+}): Promise<{
     url: string;
     expiresAt: string | null;
 }>;
@@ -363,6 +369,7 @@ export declare function socialRequest<T>(config: RoomSocialConfig, path: string,
     body?: unknown;
     signal?: AbortSignal;
     formData?: FormData;
+    headers?: Record<string, string>;
 }): Promise<T>;
 export declare function cleanUsername(username: string): string;
 export declare function cleanRoomId(room: string): string;

package/dist/social-client.js

@@ -1,6 +1,9 @@
 import { resolveRoomsWsUrl } from "./client.js";
 import { envString, ROOM_CHAT_API_URL } from "./endpoints.js";
-export const ROOM_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+/** Largest per-file size any tier accepts (plus tier). The server enforces
+ *  the per-tier caps (free 10MB/file, plus 25MB/file) and daily quotas; this
+ *  constant only pre-flights uploads no tier could ever accept. */
+export const ROOM_ATTACHMENT_MAX_BYTES = 25 * 1024 * 1024;
 export class RoomSocialError extends Error {
     name = "RoomSocialError";
     status;
@@ -517,9 +520,22 @@ export async function restoreRoomDoc(config, docId, input = {}) {
     const result = await socialRequest(config, `/docs/${encodeURIComponent(docId)}/restore`, { method: "POST", body: input });
     return result.doc;
 }
-export async function getRoomAttachmentUrl(config, room, key) {
+export async function getRoomAttachmentUrl(config, room, key, opts = {}) {
+    // The object key identifies the object and stays in the query. The
+    // download filename and force-download flag ride REQUEST HEADERS, never
+    // the URL: a private-room filename in the query string leaked into the
+    // relay's access logs and error telemetry (Morgan, Sentry).
     const params = new URLSearchParams({ key });
-    const result = await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/attachment-url?${params.toString()}`, { method: "GET" });
+    const headers = {};
+    // Percent-encode the name: Fetch/HTTP header values are byte strings, so a
+    // raw Unicode filename (报告.py, an emoji) throws a TypeError before the
+    // request is sent. The store decodes with decodeURIComponent.
+    if (opts.name)
+        headers["X-Om-Download-Name"] = encodeURIComponent(opts.name);
+    // Forces a Content-Disposition attachment even for inline mimes.
+    if (opts.download)
+        headers["X-Om-Download"] = "1";
+    const result = await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/attachment-url?${params.toString()}`, { method: "GET", headers });
     if (!result.url) {
         throw new RoomSocialError("Attachment sign failed", 502, result);
     }
@@ -587,6 +603,7 @@ export async function socialRequest(config, path, init = {}) {
             Authorization: `Bearer ${config.apiKey}`,
             Accept: "application/json",
             ...(hasJsonBody ? { "Content-Type": "application/json" } : {}),
+            ...(init.headers ?? {}),
         },
         ...(hasJsonBody
             ? { body: JSON.stringify(init.body) }
@@ -658,6 +675,63 @@ function requestPath(url) {
 function trimTrailingSlash(value) {
     return value.replace(/\/+$/, "");
 }
+/** Source/config/text extensions declared as text/plain so the server's
+ *  UTF-8 code-file lane accepts them. Markup extensions the server
+ *  blocklists (html, svg, xml, ...) are deliberately absent: they fall
+ *  through to application/octet-stream and the server rejects them. */
+const CODE_TEXT_EXTENSIONS = new Set([
+    "js",
+    "jsx",
+    "ts",
+    "tsx",
+    "py",
+    "rb",
+    "go",
+    "rs",
+    "java",
+    "c",
+    "h",
+    "cc",
+    "cpp",
+    "hpp",
+    "cs",
+    "php",
+    "sh",
+    "bash",
+    "zsh",
+    "fish",
+    "ps1",
+    "sql",
+    "yaml",
+    "yml",
+    "toml",
+    "ini",
+    "cfg",
+    "conf",
+    "log",
+    "diff",
+    "patch",
+    "tex",
+    "r",
+    "jl",
+    "kt",
+    "kts",
+    "swift",
+    "scala",
+    "clj",
+    "cljs",
+    "ex",
+    "exs",
+    "erl",
+    "lua",
+    "pl",
+    "pm",
+    "dart",
+    "gradle",
+    "properties",
+    "bat",
+    "cmd",
+]);
 export function mimeFromFilename(filename) {
     const lower = filename.toLowerCase();
     if (lower.endsWith(".png"))
@@ -668,6 +742,10 @@ export function mimeFromFilename(filename) {
         return "image/webp";
     if (lower.endsWith(".gif"))
         return "image/gif";
+    if (lower.endsWith(".mp4"))
+        return "video/mp4";
+    if (lower.endsWith(".webm"))
+        return "video/webm";
     if (lower.endsWith(".pdf"))
         return "application/pdf";
     if (lower.endsWith(".txt"))
@@ -687,5 +765,8 @@ export function mimeFromFilename(filename) {
     if (lower.endsWith(".pptx")) {
         return "application/vnd.openxmlformats-officedocument.presentationml.presentation";
     }
+    const dot = lower.lastIndexOf(".");
+    if (dot !== -1 && CODE_TEXT_EXTENSIONS.has(lower.slice(dot + 1)))
+        return "text/plain";
     return "application/octet-stream";
 }

package/dist/social-types.d.ts

@@ -44,16 +44,26 @@ export interface RoomFollowResult {
     isNewFollow?: boolean;
 }
 export interface RoomAttachment {
-    /** Object key under room-attachments/; clients sign it at render time. */
-    key: string;
+    /**
+     * Object key under room-attachments/; clients sign it at render time.
+     * Absent while scanStatus is "pending" on entries served to members: the
+     * store withholds the signable key until the scan clears, so render the
+     * metadata as a placeholder and do not attempt signing without a key.
+     */
+    key?: string | undefined;
     name: string;
     size: number;
     mime: string;
     scanStatus?: "pending" | "clean" | "held" | undefined;
 }
 export interface RoomAttachmentUpload {
-    /** The stored attachment plus its first signed URL, for immediate render. */
+    /**
+     * The stored attachment plus its first signed URL, for immediate render.
+     * The uploader always receives the key; only member views of PENDING
+     * entries withhold it.
+     */
     attachment: RoomAttachment & {
+        key: string;
         url: string;
         expiresAt: string | null;
     };

package/dist/types.d.ts

@@ -1,2 +1,2 @@
-export type { RoomAccessMode, RoomAttachment, RoomAuditEntry, RoomAuditLogPayload, RoomAuditLogRequestPayload, RoomAuthSuccessPayload, RoomBackfillPayload, RoomClientMessage, RoomCreatedPayload, RoomCreatePayload, RoomDmHistoryPayload, RoomDmHistoryResultPayload, RoomDmInboxUpdatedPayload, RoomDmMessage, RoomDmMessagePayload, RoomDmOpenedPayload, RoomDmOpenPayload, RoomDmParticipant, RoomDmReadPayload, RoomDmSendPayload, RoomEntryUpdatedPayload, RoomErrorPayload, RoomFriendPresence, RoomInvitedPayload, RoomInvitePayload, RoomLedgerEntry, RoomMember, RoomMemberRemovedPayload, RoomMemberRoleChangedPayload, RoomMemberTier, RoomMessagePayload, RoomMeta, RoomModerateMemberPayload, RoomMutedPayload, RoomPinsPayload, RoomPresenceDeltaPayload, RoomPresencePayload, RoomReactorsPayload, RoomReadStatePayload, RoomRemoveMemberPayload, RoomReportedPayload, RoomReportPayload, RoomResyncPayload, RoomRole, RoomRoleChangePayload, RoomSearchPayload, RoomSearchResultsPayload, RoomSearchScope, RoomServerMessage, RoomServerMessageOf, RoomSetReadOnlyPayload, RoomSpace, RoomSpaceJoinedPayload, RoomSpacesPayload, RoomThreadPayload, RoomTopic, RoomTopicAttention, RoomTopicBucketState, RoomTopicCreatePayload, RoomTopicListPayload, RoomTopicMergePayload, RoomTopicMovePayload, RoomTopicRenamePayload, RoomTopicResolvePayload, RoomTopicResultPayload, RoomTopicSetAttentionPayload, RoomTopicsPolicy, RoomTopicsResultPayload, RoomTopicUpdatedPayload, RoomTypingPayload, RoomUserStatus, RoomWhoPayload, } from "./shared/rooms-protocol.js";
+export type { RoomAccessMode, RoomAttachment, RoomAttachmentInput, RoomAuditEntry, RoomAuditLogPayload, RoomAuditLogRequestPayload, RoomAuthSuccessPayload, RoomBackfillPayload, RoomClientMessage, RoomCreatedPayload, RoomCreatePayload, RoomDmHistoryPayload, RoomDmHistoryResultPayload, RoomDmInboxUpdatedPayload, RoomDmMessage, RoomDmMessagePayload, RoomDmOpenedPayload, RoomDmOpenPayload, RoomDmParticipant, RoomDmReadPayload, RoomDmSendPayload, RoomEntryUpdatedPayload, RoomErrorPayload, RoomFriendPresence, RoomInvitedPayload, RoomInvitePayload, RoomLedgerEntry, RoomMember, RoomMemberRemovedPayload, RoomMemberRoleChangedPayload, RoomMemberTier, RoomMessagePayload, RoomMeta, RoomModerateMemberPayload, RoomMutedPayload, RoomPinsPayload, RoomPresenceDeltaPayload, RoomPresencePayload, RoomReactorsPayload, RoomReadStatePayload, RoomRemoveMemberPayload, RoomReportedPayload, RoomReportPayload, RoomResyncPayload, RoomRole, RoomRoleChangePayload, RoomSearchPayload, RoomSearchResultsPayload, RoomSearchScope, RoomServerMessage, RoomServerMessageOf, RoomSetReadOnlyPayload, RoomSpace, RoomSpaceJoinedPayload, RoomSpacesPayload, RoomThreadPayload, RoomTopic, RoomTopicAttention, RoomTopicBucketState, RoomTopicCreatePayload, RoomTopicListPayload, RoomTopicMergePayload, RoomTopicMovePayload, RoomTopicRenamePayload, RoomTopicResolvePayload, RoomTopicResultPayload, RoomTopicSetAttentionPayload, RoomTopicsPolicy, RoomTopicsResultPayload, RoomTopicUpdatedPayload, RoomTypingPayload, RoomUserStatus, RoomWhoPayload, } from "./shared/rooms-protocol.js";
 export { applyRoomPresenceDelta, isSystemRoomLedgerEntryType, ROOM_PRESENCE_SAMPLE_LIMIT, RoomClientMessageType, RoomLedgerEntryType, RoomServerMessageType, SUPPORTED_ROOM_PROTOCOL_VERSION, } from "./shared/rooms-protocol.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openmarket/rooms-client",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "OM Rooms protocol client: wire types, WebSocket + REST clients, and chat view-models. Browser-safe (no node:/bun: imports).",
   "type": "module",
   "license": "Apache-2.0",

package/src/client.ts

@@ -7,7 +7,7 @@ import { authFromApiKey } from "./jwt.js";
 import { consumeRoomSuggestionAttribution } from "./suggestion-attribution.js";
 import {
   type RoomAccessMode,
-  type RoomAttachment,
+  type RoomAttachmentInput,
   type RoomAuditLogPayload,
   type RoomAuthSuccessPayload,
   type RoomBackfillPayload,
@@ -82,7 +82,7 @@ export interface RoomJoinOptions {
 
 export interface RoomSayOptions extends RoomJoinOptions {
   text?: string;
-  attachments?: RoomAttachment[];
+  attachments?: RoomAttachmentInput[];
   inReplyTo?: number;
   /** Post directly into a topic; the room's linear stream is unaffected. */
   topicId?: string;
@@ -261,7 +261,9 @@ export interface RoomJoinedSession {
   client: RoomWsClient;
 }
 
-function toRoomAttachmentPayloads(attachments: readonly RoomAttachment[]): RoomAttachment[] {
+function toRoomAttachmentPayloads(
+  attachments: readonly RoomAttachmentInput[],
+): RoomAttachmentInput[] {
   return attachments.map(({ key, name, size, mime }) => ({ key, name, size, mime }));
 }
 
@@ -1150,7 +1152,7 @@ export function postRoomMessage(
   room: string,
   text: string,
   inReplyTo?: number,
-  attachments?: RoomAttachment[],
+  attachments?: RoomAttachmentInput[],
   topicId?: string,
 ): string {
   const clientMsgId = randomUUID();

package/src/shared/rooms-protocol.ts

@@ -246,14 +246,27 @@ export interface RoomLedgerEntry {
 }
 
 export interface RoomAttachment {
-  /** Object key under room-attachments/; clients sign it at render time. */
-  key: string;
+  /**
+   * Object key under room-attachments/; clients sign it at render time.
+   * Absent while scanStatus is "pending" on entries served to members: the
+   * store withholds the signable key until the scan clears, so render the
+   * metadata as a placeholder and do not attempt signing without a key.
+   */
+  key?: string | undefined;
   name: string;
   size: number;
   mime: string;
   scanStatus?: "pending" | "clean" | "held" | undefined;
 }
 
+/**
+ * A postable attachment reference. Outbound frames must always carry the
+ * stored key (senders reference their own uploads, which include it); only
+ * read views of pending entries may be keyless, and those must never be
+ * forwarded back into a post.
+ */
+export type RoomAttachmentInput = RoomAttachment & { key: string };
+
 /**
  * A registry-backed topic inside a channel. The id is permanent: rename
  * changes `name` only, and links (`om://topic/<topicId>`) keep resolving.
@@ -968,7 +981,7 @@ export type RoomClientMessage =
       payload: {
         room: string;
         text?: string;
-        attachments?: RoomAttachment[];
+        attachments?: RoomAttachmentInput[];
         inReplyTo?: number;
         /** Post directly into a topic; the room's linear stream is unaffected. */
         topicId?: string;

package/src/social-client.ts

@@ -62,7 +62,10 @@ export type {
   RoomSuggestionSource,
 } from "./social-types.js";
 
-export const ROOM_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+/** Largest per-file size any tier accepts (plus tier). The server enforces
+ *  the per-tier caps (free 10MB/file, plus 25MB/file) and daily quotas; this
+ *  constant only pre-flights uploads no tier could ever accept. */
+export const ROOM_ATTACHMENT_MAX_BYTES = 25 * 1024 * 1024;
 
 export class RoomSocialError extends Error {
   override readonly name = "RoomSocialError";
@@ -1097,12 +1100,24 @@ export async function getRoomAttachmentUrl(
   config: RoomSocialConfig,
   room: string,
   key: string,
+  opts: { name?: string; download?: boolean } = {},
 ): Promise<{ url: string; expiresAt: string | null }> {
+  // The object key identifies the object and stays in the query. The
+  // download filename and force-download flag ride REQUEST HEADERS, never
+  // the URL: a private-room filename in the query string leaked into the
+  // relay's access logs and error telemetry (Morgan, Sentry).
   const params = new URLSearchParams({ key });
+  const headers: Record<string, string> = {};
+  // Percent-encode the name: Fetch/HTTP header values are byte strings, so a
+  // raw Unicode filename (报告.py, an emoji) throws a TypeError before the
+  // request is sent. The store decodes with decodeURIComponent.
+  if (opts.name) headers["X-Om-Download-Name"] = encodeURIComponent(opts.name);
+  // Forces a Content-Disposition attachment even for inline mimes.
+  if (opts.download) headers["X-Om-Download"] = "1";
   const result = await socialRequest<{ url?: string; expiresAt?: string | null }>(
     config,
     `/rooms/${encodeURIComponent(cleanRoomId(room))}/attachment-url?${params.toString()}`,
-    { method: "GET" },
+    { method: "GET", headers },
   );
   if (!result.url) {
     throw new RoomSocialError("Attachment sign failed", 502, result);
@@ -1195,6 +1210,7 @@ export async function socialRequest<T>(
     body?: unknown;
     signal?: AbortSignal;
     formData?: FormData;
+    headers?: Record<string, string>;
   } = {},
 ): Promise<T> {
   const url = `${trimTrailingSlash(config.apiUrl)}${path}`;
@@ -1205,6 +1221,7 @@ export async function socialRequest<T>(
       Authorization: `Bearer ${config.apiKey}`,
       Accept: "application/json",
       ...(hasJsonBody ? { "Content-Type": "application/json" } : {}),
+      ...(init.headers ?? {}),
     },
     ...(hasJsonBody
       ? { body: JSON.stringify(init.body) }
@@ -1284,12 +1301,72 @@ function trimTrailingSlash(value: string): string {
   return value.replace(/\/+$/, "");
 }
 
+/** Source/config/text extensions declared as text/plain so the server's
+ *  UTF-8 code-file lane accepts them. Markup extensions the server
+ *  blocklists (html, svg, xml, ...) are deliberately absent: they fall
+ *  through to application/octet-stream and the server rejects them. */
+const CODE_TEXT_EXTENSIONS = new Set([
+  "js",
+  "jsx",
+  "ts",
+  "tsx",
+  "py",
+  "rb",
+  "go",
+  "rs",
+  "java",
+  "c",
+  "h",
+  "cc",
+  "cpp",
+  "hpp",
+  "cs",
+  "php",
+  "sh",
+  "bash",
+  "zsh",
+  "fish",
+  "ps1",
+  "sql",
+  "yaml",
+  "yml",
+  "toml",
+  "ini",
+  "cfg",
+  "conf",
+  "log",
+  "diff",
+  "patch",
+  "tex",
+  "r",
+  "jl",
+  "kt",
+  "kts",
+  "swift",
+  "scala",
+  "clj",
+  "cljs",
+  "ex",
+  "exs",
+  "erl",
+  "lua",
+  "pl",
+  "pm",
+  "dart",
+  "gradle",
+  "properties",
+  "bat",
+  "cmd",
+]);
+
 export function mimeFromFilename(filename: string): string {
   const lower = filename.toLowerCase();
   if (lower.endsWith(".png")) return "image/png";
   if (lower.endsWith(".jpg") || lower.endsWith(".jpeg")) return "image/jpeg";
   if (lower.endsWith(".webp")) return "image/webp";
   if (lower.endsWith(".gif")) return "image/gif";
+  if (lower.endsWith(".mp4")) return "video/mp4";
+  if (lower.endsWith(".webm")) return "video/webm";
   if (lower.endsWith(".pdf")) return "application/pdf";
   if (lower.endsWith(".txt")) return "text/plain";
   if (lower.endsWith(".md") || lower.endsWith(".markdown")) return "text/markdown";
@@ -1304,5 +1381,7 @@ export function mimeFromFilename(filename: string): string {
   if (lower.endsWith(".pptx")) {
     return "application/vnd.openxmlformats-officedocument.presentationml.presentation";
   }
+  const dot = lower.lastIndexOf(".");
+  if (dot !== -1 && CODE_TEXT_EXTENSIONS.has(lower.slice(dot + 1))) return "text/plain";
   return "application/octet-stream";
 }

package/src/social-types.ts

@@ -53,8 +53,13 @@ export interface RoomFollowResult {
 }
 
 export interface RoomAttachment {
-  /** Object key under room-attachments/; clients sign it at render time. */
-  key: string;
+  /**
+   * Object key under room-attachments/; clients sign it at render time.
+   * Absent while scanStatus is "pending" on entries served to members: the
+   * store withholds the signable key until the scan clears, so render the
+   * metadata as a placeholder and do not attempt signing without a key.
+   */
+  key?: string | undefined;
   name: string;
   size: number;
   mime: string;
@@ -62,8 +67,16 @@ export interface RoomAttachment {
 }
 
 export interface RoomAttachmentUpload {
-  /** The stored attachment plus its first signed URL, for immediate render. */
-  attachment: RoomAttachment & { url: string; expiresAt: string | null };
+  /**
+   * The stored attachment plus its first signed URL, for immediate render.
+   * The uploader always receives the key; only member views of PENDING
+   * entries withhold it.
+   */
+  attachment: RoomAttachment & {
+    key: string;
+    url: string;
+    expiresAt: string | null;
+  };
 }
 
 export interface RoomPublicProfile {

package/src/types.ts

@@ -1,6 +1,7 @@
 export type {
   RoomAccessMode,
   RoomAttachment,
+  RoomAttachmentInput,
   RoomAuditEntry,
   RoomAuditLogPayload,
   RoomAuditLogRequestPayload,