@openmarket/rooms-client 0.7.0 → 0.8.0

package/README.md

@@ -22,4 +22,23 @@ Bun consumers resolve raw TypeScript via the `bun` export condition; Node and bu
 
 ## Versioning
 
-The npm version is managed by hand: bump `package.json` here, `npm publish`, then bump the consumers' pins. The monorepo's release script deliberately skips this package's `package.json`. `src/version.ts` is the exception: it carries the wire/runner version and is auto-bumped with every `om` release so the WebSocket handshake tracks the daemon.
+The npm version is released separately from the OpenMarket application. The
+monorepo release script deliberately skips this package's `package.json`;
+`src/version.ts` is the exception because it carries the wire/runner version.
+
+Prepare a version commit with the guarded package gates:
+
+```bash
+bun run rooms-client:release prepare 0.8.0
+```
+
+After that version commit is merged, publish only from a clean, current
+`main` checkout:
+
+```bash
+bun run rooms-client:release publish 0.8.0
+```
+
+The publish command verifies npm identity and version availability, reruns
+the package gates, publishes, and prints the update commands for
+`openmarket-chat` and `openmarket-chat-cloud`. It never commits or pushes.

package/dist/client.d.ts

@@ -212,6 +212,7 @@ export interface RoomDmSendRequest {
      *  URL. Stored on the message's imageUrl; the client signs keys on render.
      *  Additive — omitted for text-only sends. */
     imageUrl?: string;
+    attachments?: RoomAttachmentInput[];
     metadata?: RoomForwardMetadata;
 }
 export interface RoomDmReplyRequest extends RoomDmSendRequest {

package/dist/client.js

@@ -489,6 +489,9 @@ export async function sendRoomDmOnClient(client, request, timeoutMs) {
             ...(request.username ? { username: request.username } : {}),
             ...(request.conversationId ? { conversationId: request.conversationId } : {}),
             ...(request.imageUrl ? { imageUrl: request.imageUrl } : {}),
+            ...(request.attachments?.length
+                ? { attachments: toRoomAttachmentPayloads(request.attachments) }
+                : {}),
             ...(request.metadata ? { metadata: request.metadata } : {}),
         },
         timestamp: Date.now(),
@@ -511,6 +514,9 @@ export async function replyRoomDmOnClient(client, request, timeoutMs) {
             ...(request.username ? { username: request.username } : {}),
             ...(request.conversationId ? { conversationId: request.conversationId } : {}),
             ...(request.imageUrl ? { imageUrl: request.imageUrl } : {}),
+            ...(request.attachments?.length
+                ? { attachments: toRoomAttachmentPayloads(request.attachments) }
+                : {}),
             ...(request.metadata ? { metadata: request.metadata } : {}),
         },
         timestamp: Date.now(),

package/dist/shared/rooms-protocol.d.ts

@@ -98,6 +98,7 @@ export declare const RoomServerMessageType: {
     readonly DM_MESSAGE_EDITED: "DM_MESSAGE_EDITED";
     readonly DM_MESSAGE_DELETED: "DM_MESSAGE_DELETED";
     readonly DM_REACTION_UPDATED: "DM_REACTION_UPDATED";
+    readonly DM_ATTACHMENT_UPDATED: "DM_ATTACHMENT_UPDATED";
     readonly DM_PIN_UPDATED: "DM_PIN_UPDATED";
     readonly DM_PINS: "DM_PINS";
     readonly TOPIC: "TOPIC";
@@ -278,10 +279,11 @@ export interface RoomWebhookMetadata {
 }
 export interface RoomAttachment {
     /**
-     * Object key under room-attachments/; clients sign it at render time.
-     * Absent while scanStatus is "pending" on entries served to members: the
-     * store withholds the signable key until the scan clears, so render the
-     * metadata as a placeholder and do not attempt signing without a key.
+     * Object key under room-attachments/ or dm-attachments/; clients sign it
+     * at render time. Absent while scanStatus is "pending" on entries served
+     * to recipients: the store withholds the signable key until the scan
+     * clears, so render the metadata as a placeholder and do not attempt
+     * signing without a key.
      */
     key?: string | undefined;
     name: string;
@@ -292,7 +294,7 @@ export interface RoomAttachment {
 /**
  * A postable attachment reference. Outbound frames must always carry the
  * stored key (senders reference their own uploads, which include it); only
- * read views of pending entries may be keyless, and those must never be
+ * recipient views of pending entries may be keyless, and those must never be
  * forwarded back into a post.
  */
 export type RoomAttachmentInput = RoomAttachment & {
@@ -619,6 +621,7 @@ export interface RoomDmSendPayload {
     /** DM-attachment key or legacy public image URL; stored on the message's
      *  imageUrl. Additive — text-only sends omit it. */
     imageUrl?: string;
+    attachments?: RoomAttachmentInput[];
     metadata?: RoomForwardMetadata | undefined;
 }
 /** Client → server: send a DM whose parent is another message in the same conversation. */
@@ -677,6 +680,12 @@ export interface RoomDmReactionUpdatedPayload {
     }>;
     participant: RoomDmParticipant;
 }
+export interface RoomDmAttachmentUpdatedPayload {
+    conversationId: string;
+    messageId: string;
+    scanStatus: "clean" | "held";
+    attachments: RoomAttachment[];
+}
 export interface RoomDmPinPayload {
     requestId?: string;
     conversationId?: string;
@@ -1471,6 +1480,10 @@ export type RoomServerMessage = {
     type: typeof RoomServerMessageType.DM_REACTION_UPDATED;
     payload: RoomDmReactionUpdatedPayload;
     timestamp: number;
+} | {
+    type: typeof RoomServerMessageType.DM_ATTACHMENT_UPDATED;
+    payload: RoomDmAttachmentUpdatedPayload;
+    timestamp: number;
 } | {
     type: typeof RoomServerMessageType.DM_PIN_UPDATED;
     payload: RoomDmPinUpdatedPayload;

package/dist/shared/rooms-protocol.js

@@ -97,6 +97,7 @@ export const RoomServerMessageType = {
     DM_MESSAGE_EDITED: "DM_MESSAGE_EDITED",
     DM_MESSAGE_DELETED: "DM_MESSAGE_DELETED",
     DM_REACTION_UPDATED: "DM_REACTION_UPDATED",
+    DM_ATTACHMENT_UPDATED: "DM_ATTACHMENT_UPDATED",
     DM_PIN_UPDATED: "DM_PIN_UPDATED",
     DM_PINS: "DM_PINS",
     TOPIC: "TOPIC",

package/dist/social-client.d.ts

@@ -450,13 +450,27 @@ export declare function markRoomUnread(config: RoomSocialConfig, room: string, s
  * one. The pinned ROOM_SET_ATTENTION frame (setRoomAttentionOnClient)
  * predates `untilMs` and stays the live-session path for permanent
  * postures; servers older than mute-with-duration strip the field and land
- * the mute permanent, so a requested `untilMs` the echo omits fail-closes:
- * the attention is reset and the call throws rather than leave an
- * unbounded mute the caller believes timed. Echoes the persisted
- * attention; `muteUntil` is the ISO expiry, null when none stands.
+ * the mute permanent, so a requested `untilMs` the echo omits is a DROPPED
+ * DEADLINE. By default that fail-closes here: the attention is reset and
+ * the call throws rather than leave an unbounded mute the caller believes
+ * timed. Callers with a richer fail-closed seam of their own opt out via
+ * `onDroppedDeadline: "resolve"` and own the handling (see the option).
+ * Echoes the persisted attention; `muteUntil` is the ISO expiry, null when
+ * none stands (which, under "resolve", is how a dropped deadline reads).
  */
 export declare function setRoomAttentionRest(config: RoomSocialConfig, room: string, attention: RoomTopicAttention, options?: {
     untilMs?: number | undefined;
+    /** What to do when a requested `untilMs` comes back without an echoed
+     *  `muteUntil` (the server predates timed mutes and landed the mute
+     *  PERMANENT). Default "undo-and-throw": reset attention to 'default'
+     *  and throw RoomSocialError 502, so no unbounded mute stands. Pass
+     *  "resolve" ONLY when the caller implements its own dropped-deadline
+     *  handling: the call then performs no undo write and no throw, and
+     *  resolves with `muteUntil: null` for the caller to act on. Canonical
+     *  example: the GUI session seam, which undoes to the last
+     *  WS-confirmed attention, richer than this library's
+     *  undo-to-default. */
+    onDroppedDeadline?: "undo-and-throw" | "resolve" | undefined;
 }): Promise<{
     attention: RoomTopicAttention;
     muteUntil: string | null;
@@ -590,8 +604,10 @@ export declare function socialRequest<T>(config: RoomSocialConfig, path: string,
     formData?: FormData;
     headers?: Record<string, string>;
     /** Fetch cache mode; token-bearing reads pass "no-store" so posting
-     *  credentials never persist in a browser HTTP cache. */
-    cache?: RequestCache;
+     *  credentials never persist in a browser HTTP cache. Spelled as the
+     *  literal union rather than DOM's RequestCache: this package
+     *  typechecks without the DOM lib. */
+    cache?: "default" | "force-cache" | "no-cache" | "no-store" | "only-if-cached" | "reload";
 }): Promise<T>;
 export declare function cleanUsername(username: string): string;
 export declare function cleanRoomId(room: string): string;

package/dist/social-client.js

@@ -724,10 +724,13 @@ export async function markRoomUnread(config, room, seq) {
  * one. The pinned ROOM_SET_ATTENTION frame (setRoomAttentionOnClient)
  * predates `untilMs` and stays the live-session path for permanent
  * postures; servers older than mute-with-duration strip the field and land
- * the mute permanent, so a requested `untilMs` the echo omits fail-closes:
- * the attention is reset and the call throws rather than leave an
- * unbounded mute the caller believes timed. Echoes the persisted
- * attention; `muteUntil` is the ISO expiry, null when none stands.
+ * the mute permanent, so a requested `untilMs` the echo omits is a DROPPED
+ * DEADLINE. By default that fail-closes here: the attention is reset and
+ * the call throws rather than leave an unbounded mute the caller believes
+ * timed. Callers with a richer fail-closed seam of their own opt out via
+ * `onDroppedDeadline: "resolve"` and own the handling (see the option).
+ * Echoes the persisted attention; `muteUntil` is the ISO expiry, null when
+ * none stands (which, under "resolve", is how a dropped deadline reads).
  */
 export async function setRoomAttentionRest(config, room, attention, options = {}) {
     const body = { attention };
@@ -738,7 +741,9 @@ export async function setRoomAttentionRest(config, room, attention, options = {}
         body,
     });
     const muteUntil = typeof result.muteUntil === "string" ? result.muteUntil : null;
-    if (options.untilMs !== undefined && muteUntil === null) {
+    if (options.untilMs !== undefined &&
+        muteUntil === null &&
+        options.onDroppedDeadline !== "resolve") {
         // The undo cannot know the caller's prior attention, so it deliberately
         // lands 'default' (the same neutral a lapsed timed mute reads as, see
         // resolveTopicAttention) rather than leave the unbounded mute standing.

package/dist/social-types.d.ts

@@ -125,6 +125,8 @@ export interface RoomDmMessage {
     /** DM image: a private dm-attachments/ key (signed on render) or a legacy
      *  public URL. Additive — old messages carry none. */
     imageUrl?: string | null;
+    /** Private scanned attachments. Keys are absent until the bytes are clean. */
+    attachments?: RoomAttachment[];
     /** Aggregated reactions (per-emoji userId lists). Additive. */
     reactions?: Array<{
         emoji: string;

package/dist/types.d.ts

@@ -1,2 +1,2 @@
-export type { RoomAccessMode, RoomAttachment, RoomAttachmentInput, RoomAuditEntry, RoomAuditLogPayload, RoomAuditLogRequestPayload, RoomAuthSuccessPayload, RoomBackfillPayload, RoomClientMessage, RoomClientPlatform, RoomCreatedPayload, RoomCreatePayload, RoomDmHistoryPayload, RoomDmHistoryResultPayload, RoomDmInboxUpdatedPayload, RoomDmMessage, RoomDmMessageDeletedPayload, RoomDmMessageEditedPayload, RoomDmMessagePayload, RoomDmOpenedPayload, RoomDmOpenPayload, RoomDmParticipant, RoomDmPinsResultPayload, RoomDmPinUpdatedPayload, RoomDmReactionUpdatedPayload, RoomDmReadPayload, RoomDmReplyPayload, RoomDmSendPayload, RoomEntryUpdatedPayload, RoomErrorPayload, RoomForwardedFrom, RoomForwardMetadata, RoomFriendPresence, RoomInvitedPayload, RoomInvitePayload, RoomLedgerEntry, RoomMember, RoomMemberRemovedPayload, RoomMemberRoleChangedPayload, RoomMemberTier, RoomMessagePayload, RoomMeta, RoomModerateMemberPayload, RoomMutedPayload, RoomPinsPayload, RoomPollOption, RoomPollSummary, RoomPresenceDeltaPayload, RoomPresencePayload, RoomReactorsPayload, RoomReadStatePayload, RoomRemoveMemberPayload, RoomReportedPayload, RoomReportPayload, RoomResyncPayload, RoomRole, RoomRoleChangePayload, RoomSearchPayload, RoomSearchResultsPayload, RoomSearchScope, RoomServerMessage, RoomServerMessageOf, RoomSetAttentionPayload, RoomSetReadOnlyPayload, RoomSpace, RoomSpaceJoinedPayload, RoomSpacesPayload, RoomThreadPayload, RoomTopic, RoomTopicAttention, RoomTopicBucketState, RoomTopicCreatePayload, RoomTopicListPayload, RoomTopicMergePayload, RoomTopicMovePayload, RoomTopicRenamePayload, RoomTopicResolvePayload, RoomTopicResultPayload, RoomTopicSetAttentionPayload, RoomTopicsPolicy, RoomTopicsResultPayload, RoomTopicUpdatedPayload, RoomTypingPayload, RoomUnfurl, RoomUserStatus, RoomWhoPayload, } from "./shared/rooms-protocol.js";
+export type { RoomAccessMode, RoomAttachment, RoomAttachmentInput, RoomAuditEntry, RoomAuditLogPayload, RoomAuditLogRequestPayload, RoomAuthSuccessPayload, RoomBackfillPayload, RoomClientMessage, RoomClientPlatform, RoomCreatedPayload, RoomCreatePayload, RoomDmAttachmentUpdatedPayload, RoomDmHistoryPayload, RoomDmHistoryResultPayload, RoomDmInboxUpdatedPayload, RoomDmMessage, RoomDmMessageDeletedPayload, RoomDmMessageEditedPayload, RoomDmMessagePayload, RoomDmOpenedPayload, RoomDmOpenPayload, RoomDmParticipant, RoomDmPinsResultPayload, RoomDmPinUpdatedPayload, RoomDmReactionUpdatedPayload, RoomDmReadPayload, RoomDmReplyPayload, RoomDmSendPayload, RoomEntryUpdatedPayload, RoomErrorPayload, RoomForwardedFrom, RoomForwardMetadata, RoomFriendPresence, RoomInvitedPayload, RoomInvitePayload, RoomLedgerEntry, RoomMember, RoomMemberRemovedPayload, RoomMemberRoleChangedPayload, RoomMemberTier, RoomMessagePayload, RoomMeta, RoomModerateMemberPayload, RoomMutedPayload, RoomPinsPayload, RoomPollOption, RoomPollSummary, RoomPresenceDeltaPayload, RoomPresencePayload, RoomReactorsPayload, RoomReadStatePayload, RoomRemoveMemberPayload, RoomReportedPayload, RoomReportPayload, RoomResyncPayload, RoomRole, RoomRoleChangePayload, RoomSearchPayload, RoomSearchResultsPayload, RoomSearchScope, RoomServerMessage, RoomServerMessageOf, RoomSetAttentionPayload, RoomSetReadOnlyPayload, RoomSpace, RoomSpaceJoinedPayload, RoomSpacesPayload, RoomThreadPayload, RoomTopic, RoomTopicAttention, RoomTopicBucketState, RoomTopicCreatePayload, RoomTopicListPayload, RoomTopicMergePayload, RoomTopicMovePayload, RoomTopicRenamePayload, RoomTopicResolvePayload, RoomTopicResultPayload, RoomTopicSetAttentionPayload, RoomTopicsPolicy, RoomTopicsResultPayload, RoomTopicUpdatedPayload, RoomTypingPayload, RoomUnfurl, RoomUserStatus, RoomWhoPayload, } from "./shared/rooms-protocol.js";
 export { applyRoomPresenceDelta, isSystemRoomLedgerEntryType, ROOM_PRESENCE_SAMPLE_LIMIT, RoomClientMessageType, RoomLedgerEntryType, RoomServerMessageType, SUPPORTED_ROOM_PROTOCOL_VERSION, } from "./shared/rooms-protocol.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openmarket/rooms-client",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "OM Rooms protocol client: wire types, WebSocket + REST clients, and chat view-models. Browser-safe (no node:/bun: imports).",
   "type": "module",
   "license": "Apache-2.0",

package/src/agent/armed-mode.ts

@@ -170,9 +170,7 @@ export function ownSeqsOf(entries: ReadonlyArray<RoomLedgerEntry>, ownUserId: st
  *  autonomous turn, and webhook chatter cannot satisfy the
  *  human-activity brake. */
 function isWebhookEntry(entry: RoomLedgerEntry): boolean {
-  return Boolean(
-    (entry.metadata as { webhook?: unknown } | undefined)?.webhook,
-  );
+  return Boolean((entry.metadata as { webhook?: unknown } | undefined)?.webhook);
 }
 
 export function isTriggeringEntry(

package/src/client.ts

@@ -297,6 +297,7 @@ export interface RoomDmSendRequest {
    *  URL. Stored on the message's imageUrl; the client signs keys on render.
    *  Additive — omitted for text-only sends. */
   imageUrl?: string;
+  attachments?: RoomAttachmentInput[];
   metadata?: RoomForwardMetadata;
 }
 
@@ -994,6 +995,9 @@ export async function sendRoomDmOnClient(
       ...(request.username ? { username: request.username } : {}),
       ...(request.conversationId ? { conversationId: request.conversationId } : {}),
       ...(request.imageUrl ? { imageUrl: request.imageUrl } : {}),
+      ...(request.attachments?.length
+        ? { attachments: toRoomAttachmentPayloads(request.attachments) }
+        : {}),
       ...(request.metadata ? { metadata: request.metadata } : {}),
     },
     timestamp: Date.now(),
@@ -1027,6 +1031,9 @@ export async function replyRoomDmOnClient(
       ...(request.username ? { username: request.username } : {}),
       ...(request.conversationId ? { conversationId: request.conversationId } : {}),
       ...(request.imageUrl ? { imageUrl: request.imageUrl } : {}),
+      ...(request.attachments?.length
+        ? { attachments: toRoomAttachmentPayloads(request.attachments) }
+        : {}),
       ...(request.metadata ? { metadata: request.metadata } : {}),
     },
     timestamp: Date.now(),

package/src/shared/rooms-protocol.ts

@@ -101,6 +101,7 @@ export const RoomServerMessageType = {
   DM_MESSAGE_EDITED: "DM_MESSAGE_EDITED",
   DM_MESSAGE_DELETED: "DM_MESSAGE_DELETED",
   DM_REACTION_UPDATED: "DM_REACTION_UPDATED",
+  DM_ATTACHMENT_UPDATED: "DM_ATTACHMENT_UPDATED",
   DM_PIN_UPDATED: "DM_PIN_UPDATED",
   DM_PINS: "DM_PINS",
   TOPIC: "TOPIC",
@@ -278,7 +279,9 @@ export interface RoomLedgerEntry {
    *  (and servers older than the unfurl worker) omit it. */
   unfurls?: RoomUnfurl[] | undefined;
   roomRole?: RoomRole | null | undefined;
-  metadata?: (Record<string, unknown> & Partial<RoomForwardMetadata> & Partial<RoomWebhookMetadata>) | undefined;
+  metadata?:
+    | (Record<string, unknown> & Partial<RoomForwardMetadata> & Partial<RoomWebhookMetadata>)
+    | undefined;
 }
 
 export type RoomForwardedFrom =
@@ -312,10 +315,11 @@ export interface RoomWebhookMetadata {
 
 export interface RoomAttachment {
   /**
-   * Object key under room-attachments/; clients sign it at render time.
-   * Absent while scanStatus is "pending" on entries served to members: the
-   * store withholds the signable key until the scan clears, so render the
-   * metadata as a placeholder and do not attempt signing without a key.
+   * Object key under room-attachments/ or dm-attachments/; clients sign it
+   * at render time. Absent while scanStatus is "pending" on entries served
+   * to recipients: the store withholds the signable key until the scan
+   * clears, so render the metadata as a placeholder and do not attempt
+   * signing without a key.
    */
   key?: string | undefined;
   name: string;
@@ -327,7 +331,7 @@ export interface RoomAttachment {
 /**
  * A postable attachment reference. Outbound frames must always carry the
  * stored key (senders reference their own uploads, which include it); only
- * read views of pending entries may be keyless, and those must never be
+ * recipient views of pending entries may be keyless, and those must never be
  * forwarded back into a post.
  */
 export type RoomAttachmentInput = RoomAttachment & { key: string };
@@ -683,7 +687,9 @@ export interface RoomDmMessage {
   createdAt?: string | number | undefined;
   /** Sealed DM: content is '' and the opaque envelope rides here. */
   secret?: RoomLedgerSecretPayload | null | undefined;
-  metadata?: (Record<string, unknown> & Partial<RoomForwardMetadata> & Partial<RoomWebhookMetadata>) | undefined;
+  metadata?:
+    | (Record<string, unknown> & Partial<RoomForwardMetadata> & Partial<RoomWebhookMetadata>)
+    | undefined;
   /** Legacy public chat-image URL (renders as-is, no signing). */
   imageUrl?: string | null | undefined;
   /** Private, signed, scanned DM attachments (dm-attachments/ keyspace).
@@ -718,6 +724,7 @@ export interface RoomDmSendPayload {
   /** DM-attachment key or legacy public image URL; stored on the message's
    *  imageUrl. Additive — text-only sends omit it. */
   imageUrl?: string;
+  attachments?: RoomAttachmentInput[];
   metadata?: RoomForwardMetadata | undefined;
 }
 
@@ -781,6 +788,13 @@ export interface RoomDmReactionUpdatedPayload {
   participant: RoomDmParticipant;
 }
 
+export interface RoomDmAttachmentUpdatedPayload {
+  conversationId: string;
+  messageId: string;
+  scanStatus: "clean" | "held";
+  attachments: RoomAttachment[];
+}
+
 export interface RoomDmPinPayload {
   requestId?: string;
   conversationId?: string;
@@ -1653,6 +1667,11 @@ export type RoomServerMessage =
       payload: RoomDmReactionUpdatedPayload;
       timestamp: number;
     }
+  | {
+      type: typeof RoomServerMessageType.DM_ATTACHMENT_UPDATED;
+      payload: RoomDmAttachmentUpdatedPayload;
+      timestamp: number;
+    }
   | {
       type: typeof RoomServerMessageType.DM_PIN_UPDATED;
       payload: RoomDmPinUpdatedPayload;

package/src/social-client.ts

@@ -1456,16 +1456,32 @@ export async function markRoomUnread(
  * one. The pinned ROOM_SET_ATTENTION frame (setRoomAttentionOnClient)
  * predates `untilMs` and stays the live-session path for permanent
  * postures; servers older than mute-with-duration strip the field and land
- * the mute permanent, so a requested `untilMs` the echo omits fail-closes:
- * the attention is reset and the call throws rather than leave an
- * unbounded mute the caller believes timed. Echoes the persisted
- * attention; `muteUntil` is the ISO expiry, null when none stands.
+ * the mute permanent, so a requested `untilMs` the echo omits is a DROPPED
+ * DEADLINE. By default that fail-closes here: the attention is reset and
+ * the call throws rather than leave an unbounded mute the caller believes
+ * timed. Callers with a richer fail-closed seam of their own opt out via
+ * `onDroppedDeadline: "resolve"` and own the handling (see the option).
+ * Echoes the persisted attention; `muteUntil` is the ISO expiry, null when
+ * none stands (which, under "resolve", is how a dropped deadline reads).
  */
 export async function setRoomAttentionRest(
   config: RoomSocialConfig,
   room: string,
   attention: RoomTopicAttention,
-  options: { untilMs?: number | undefined } = {},
+  options: {
+    untilMs?: number | undefined;
+    /** What to do when a requested `untilMs` comes back without an echoed
+     *  `muteUntil` (the server predates timed mutes and landed the mute
+     *  PERMANENT). Default "undo-and-throw": reset attention to 'default'
+     *  and throw RoomSocialError 502, so no unbounded mute stands. Pass
+     *  "resolve" ONLY when the caller implements its own dropped-deadline
+     *  handling: the call then performs no undo write and no throw, and
+     *  resolves with `muteUntil: null` for the caller to act on. Canonical
+     *  example: the GUI session seam, which undoes to the last
+     *  WS-confirmed attention, richer than this library's
+     *  undo-to-default. */
+    onDroppedDeadline?: "undo-and-throw" | "resolve" | undefined;
+  } = {},
 ): Promise<{ attention: RoomTopicAttention; muteUntil: string | null }> {
   const body: { attention: RoomTopicAttention; untilMs?: number } = { attention };
   if (options.untilMs !== undefined) body.untilMs = options.untilMs;
@@ -1479,7 +1495,11 @@ export async function setRoomAttentionRest(
     body,
   });
   const muteUntil = typeof result.muteUntil === "string" ? result.muteUntil : null;
-  if (options.untilMs !== undefined && muteUntil === null) {
+  if (
+    options.untilMs !== undefined &&
+    muteUntil === null &&
+    options.onDroppedDeadline !== "resolve"
+  ) {
     // The undo cannot know the caller's prior attention, so it deliberately
     // lands 'default' (the same neutral a lapsed timed mute reads as, see
     // resolveTopicAttention) rather than leave the unbounded mute standing.
@@ -1914,8 +1934,10 @@ export async function socialRequest<T>(
     formData?: FormData;
     headers?: Record<string, string>;
     /** Fetch cache mode; token-bearing reads pass "no-store" so posting
-     *  credentials never persist in a browser HTTP cache. */
-    cache?: RequestCache;
+     *  credentials never persist in a browser HTTP cache. Spelled as the
+     *  literal union rather than DOM's RequestCache: this package
+     *  typechecks without the DOM lib. */
+    cache?: "default" | "force-cache" | "no-cache" | "no-store" | "only-if-cached" | "reload";
   } = {},
 ): Promise<T> {
   const url = `${trimTrailingSlash(config.apiUrl)}${path}`;

package/src/social-types.ts

@@ -147,6 +147,8 @@ export interface RoomDmMessage {
   /** DM image: a private dm-attachments/ key (signed on render) or a legacy
    *  public URL. Additive — old messages carry none. */
   imageUrl?: string | null;
+  /** Private scanned attachments. Keys are absent until the bytes are clean. */
+  attachments?: RoomAttachment[];
   /** Aggregated reactions (per-emoji userId lists). Additive. */
   reactions?: Array<{ emoji: string; users: string[] }>;
   /** Shared pin state. Additive; absent means unpinned. */

package/src/types.ts

@@ -11,6 +11,7 @@ export type {
   RoomClientPlatform,
   RoomCreatedPayload,
   RoomCreatePayload,
+  RoomDmAttachmentUpdatedPayload,
   RoomDmHistoryPayload,
   RoomDmHistoryResultPayload,
   RoomDmInboxUpdatedPayload,