@palbase/web 1.3.0 → 1.5.0

package/dist/{analytics-facade-Cq7R-VH_.d.ts → analytics-facade-BQlTfsEm.d.ts}

@@ -710,6 +710,20 @@ type ChatRole = 'owner' | 'admin' | 'member';
 type MessageDirection = 'incoming' | 'outgoing';
 /** A renderable message kind. `system` = a membership commit / control frame. */
 type ChatMessageKind = 'text' | 'media' | 'system';
+/**
+ * A resolved mention span inside a message body. Produced at decode/merge time by
+ * NORMALIZING the wire `body_ranges` (the pinned `normalizeMentionRangesUtf16`
+ * contract) against the message text, then resolving the `mentionedUserId` to a
+ * roster display name. Offsets are UTF-16 code units, half-open `[start, start+length)`.
+ * `displayName` is `null` when the mentioned user is not in the local roster (the
+ * renderer falls back to the underlying `text` slice). Mirrors iOS `ResolvedMention`.
+ */
+interface ResolvedMention {
+    readonly start: number;
+    readonly length: number;
+    readonly mentionedUserId: string;
+    readonly displayName: string | null;
+}
 /** A participating USER (not a device). For a direct chat: `[me, peer]`. */
 interface ChatMember {
     /** == userId (stable identity). */
@@ -764,6 +778,25 @@ interface ChatMessage {
      * a visible message of its own — it only overlays the target's text + flag.
      */
     readonly edited: boolean;
+    /**
+     * Whether this message has been deleted-for-everyone (a cooperative encrypted
+     * tombstone from the original sender). Defaults to `false`. Once a valid
+     * tombstone folds onto this message it stays `true` (absorbing/sticky within
+     * retention). A deleted message renders ONLY the neutral "deleted" descriptor
+     * as its `text`, with reactions + reply + edit HIDDEN — delete DOMINATES edit.
+     * A delete is never a visible message of its own. (delete-for-me is a separate,
+     * local-only suppression that omits the message from this view entirely.)
+     */
+    readonly isDeleted: boolean;
+    /**
+     * The resolved mention spans on this message (defaults to `[]`). A mention is a
+     * NORMAL bubble — these spans only annotate the existing `text` for highlighting,
+     * they never make a message non-bubble. Recomputed by the Chat as the roster
+     * resolves (display names are live, not snapshotted). When this message is
+     * tombstoned (deleted-for-everyone) the spans are scrubbed to `[]` (delete
+     * DOMINATES); when it is edited they reflect the EDIT's replacement `body_ranges`.
+     */
+    readonly mentions: ResolvedMention[];
 }
 /** The receipt from a send — the server's monotonic sequence + accepted epoch. */
 interface SentReceipt {
@@ -804,6 +837,15 @@ interface ReplyRef {
     client_msg_id: string;
     preview?: QuotePreview;
 }
+/** A single mention range inside a message body.
+ * Offsets are UTF-16 code units, half-open [start, start+length).
+ * Wire: snake_case (mentioned_user_id, body_ranges) — web does RAW JSON, no case-convert.
+ */
+interface MentionRange {
+    start: number;
+    length: number;
+    mentionedUserId: string;
+}
 interface ReactionPayload {
     targetClientMsgId: string;
     emoji: string;
@@ -813,6 +855,10 @@ interface EditPayload {
     targetClientMsgId: string;
     newText: string;
 }
+interface DeletePayload {
+    targetClientMsgId: string;
+    scope: string;
+}
 
 /** A decoded incoming message handed to chat listeners. */
 interface IncomingMessage {
@@ -839,6 +885,14 @@ interface IncomingMessage {
     /** The decoded edit payload, present only when `envelopeType === 'edit'`. Lets
      * the Chat route an edit into its EditFold instead of appending a visible bubble. */
     edit?: EditPayload | null;
+    /** The decoded delete payload, present only when `envelopeType === 'delete'`. Lets
+     * the Chat route a delete-for-everyone tombstone into its DeleteFold instead of
+     * appending a visible bubble. */
+    delete?: DeletePayload | null;
+    /** The decoded mention ranges (raw, un-normalized). Present on a `'text'` bubble
+     * with `body_ranges` OR on an `'edit'` (the edit's replacement ranges). The Chat
+     * normalizes + resolves roster names → `ChatMessage.mentions` (mentions T6). */
+    bodyRanges?: MentionRange[] | null;
 }
 
 /** The intended participants of a draft chat (held until the first send). */
@@ -858,7 +912,7 @@ interface ChatBackend {
     selfUserId: string;
     /** Materialize a draft → the active group (DM get-or-create / group create+add). */
     materialize(draft: ChatDraft): Promise<MessagingGroup>;
-    sendText(group: MessagingGroup, text: string, replyTo?: ReplyRef | null): Promise<{
+    sendText(group: MessagingGroup, text: string, replyTo?: ReplyRef | null, bodyRanges?: MentionRange[] | null): Promise<{
         receipt: SentReceipt;
         clientMsgId: string;
     }>;
@@ -879,6 +933,17 @@ interface ChatBackend {
         clientMsgId: string;
         targetClientMsgId: string;
         newText: string;
+        bodyRanges?: MentionRange[] | null;
+    }): Promise<{
+        receipt: SentReceipt;
+        clientMsgId: string;
+    }>;
+    /** Send a delete-for-everyone tombstone on a target message through the same MLS
+     * application path as `sendText` (the server stays blind — a delete is just
+     * another opaque application message). Returns the receipt + the wire clientMsgId. */
+    sendDelete(group: MessagingGroup, args: {
+        clientMsgId: string;
+        targetClientMsgId: string;
     }): Promise<{
         receipt: SentReceipt;
         clientMsgId: string;
@@ -895,6 +960,15 @@ interface ChatBackend {
     subscribeLive(group: MessagingGroup, chat: Chat): Unsubscribe$1;
     /** Resolve a sender device id → its owning user id (for senderUserId). */
     userIdForDevice(group: MessagingGroup, deviceId: string): Promise<string | null>;
+    /** Load this chat's persisted delete-for-me suppression keys (durable, no wire). */
+    loadSuppressed(group: MessagingGroup): Promise<string[]>;
+    /** Persist this chat's delete-for-me suppression keys (durable, no wire). */
+    saveSuppressed(group: MessagingGroup, keys: string[]): Promise<void>;
+    /** Load this chat's persisted self-elevation dedup keys (durable, no wire) so a
+     * re-delivered mention does not re-fire `onMentionElevation` after a cold launch. */
+    loadElevated(group: MessagingGroup): Promise<string[]>;
+    /** Persist this chat's self-elevation dedup keys (durable, no wire). */
+    saveElevated(group: MessagingGroup, keys: string[]): Promise<void>;
 }
 declare class Chat {
     /** Stable, URL/log-safe id (the grp_ display id once active; a reserved local id while draft). */
@@ -917,6 +991,22 @@ declare class Chat {
     private readonly reactionFold;
     /** The single authoritative edit fold for this chat (live + own-send + history). */
     private readonly editFold;
+    /** The single authoritative delete-for-everyone fold (live + own-send + history).
+     * A tombstone scrubs its target in place (delete DOMINATES edit at render). */
+    private readonly deleteFold;
+    /** delete-for-me suppression keys (clientMsgId, or `seq:<serverSeq>` for legacy)
+     * — the message is OMITTED from this view. Local + persisted per chat, NO wire. */
+    private readonly suppressed;
+    /** True once the persisted suppression set has been loaded (so the omit applies
+     * even on the cold-launch hydrate path before a fresh deleteForMe). */
+    private suppressedLoaded;
+    /** Self-elevation dedup keys (`<selfUserId>|<clientMsgId or seq:n>`). Once a
+     * mention of me from another sender fires `onMentionElevation`, its key lands here
+     * + is persisted, so a re-delivery / cold-launch re-hydrate never re-fires. */
+    private readonly elevated;
+    /** True once the persisted elevation set has been loaded (so a re-delivered mention
+     * on the cold-launch hydrate path dedups against the persisted decision). */
+    private elevatedLoaded;
     /** Per-target BASE (original) text, so the rendered text is `edit ?? original`.
      * Seeded once per target (write-once base) so a 2nd own edit can't corrupt it. */
     private readonly originalTextByClientMsgId;
@@ -928,6 +1018,14 @@ declare class Chat {
     private wired;
     private liveUnsub;
     private readonly listeners;
+    /**
+     * Fires ONCE per `(selfUserId, clientMsgId)` when an INCOMING message mentions THIS
+     * user from ANOTHER sender (not an edit). The dedup survives re-delivery + reload
+     * via the persisted elevation set, so this never double-fires for one mention. The
+     * app wires it to a buzz/badge (e.g. an in-app banner). Best-effort cooperative —
+     * the SDK guarantees the DECISION, not the buzz. Mirrors iOS `Chat.onMentionElevation`.
+     */
+    onMentionElevation?: (message: ChatMessage) => void;
     /** @internal — obtain via pb.messaging.directChat / groupChat / chat(id). */
     constructor(args: {
         group: MessagingGroup;
@@ -948,9 +1046,29 @@ declare class Chat {
     get typing(): readonly ChatMember[];
     get lastMessage(): ChatMessage | null;
     get unreadCount(): number;
+    /**
+     * The RENDER PRECEDENCE — the single composition point (live AND history project
+     * through it identically). Over the raw `messageList` (which already carries the
+     * folded edit text + reactions + reply):
+     *   (1) in the delete-for-me suppression set → OMIT the message entirely;
+     *   (2) else tombstoned (delete-for-everyone) → the neutral "deleted" descriptor
+     *       with reactions/reply/edit HIDDEN (delete DOMINATES edit — short-circuit);
+     *   (3) else the row as-is (edit overlay + reactions + reply already applied).
+     * Pure over (messageList, deleteFold, suppressed) — recomputed on every read so a
+     * just-folded delete / just-suppressed key takes effect without rewriting rows.
+     */
+    private surfaced;
+    /** The delete-for-me suppression key: clientMsgId when present, else `seq:<n>`. */
+    private suppressionKey;
     get title(): string;
     presence(userId: string): PresenceState | null;
     private ensureWired;
+    /** Hydrate the persisted delete-for-me suppression keys (once), then re-emit so
+     * any already-surfaced suppressed message is omitted (cold-launch parity). */
+    private loadSuppressed;
+    /** Hydrate the persisted self-elevation dedup keys (once). No re-emit: the set only
+     * gates the elevation DECISION, it does not change what renders. */
+    private loadElevated;
     private hydrateHistory;
     private mergeHistory;
     /** @internal — called by the backend's live subscription. */
@@ -959,6 +1077,31 @@ declare class Chat {
      * (null = target unknown/dangling → the fold HOLDs). Captured as a bound arrow
      * so it can be passed to the pure EditFold. */
     private readonly authorOfTarget;
+    /** Resolve a message's decode-time mention spans: NORMALIZE the raw `body_ranges`
+     * against `text` (the pinned `normalizeMentionRangesUtf16` cross-SDK contract) then
+     * resolve each surviving range's `mentionedUserId` to a roster display name. An id
+     * not in the roster resolves to `null` (the renderer falls back to the `text` slice).
+     * Pure over (text, bodyRanges, memberCache); never throws. Mirrors iOS T3. */
+    private resolveMentions;
+    /** Re-resolve the roster display name on already-NORMALIZED spans (the history
+     * projection produces them with null names — resolution is LIVE, not snapshotted).
+     * A member rename then reflects on old messages. Returns the message unchanged when
+     * it has no mentions (the common case) or no name changed. Mirrors iOS T3. */
+    private resolveMentionNames;
+    /** The WINNING edit's resolved mentions for a target (normalize its replacement
+     * ranges against the new text + roster names), or `[]` if no winning edit / no
+     * ranges. The edited message's mentions reflect the EDIT's ranges (mirrors iOS T3). */
+    private editMentions;
+    /** Resolve a userId → its roster display name (null if not a known member). */
+    private displayNameOf;
+    /** Compute the SELF-ELEVATION decision for a freshly-ingested INCOMING bubble and,
+     * when it fires, record the dedup key (persisted) + invoke `onMentionElevation`.
+     * Gate (mirrors iOS T3): a surviving mention targets THIS user AND the sender is not
+     * me AND it's NOT an edit AND the `(selfUserId, clientMsgId|seq)` key isn't already
+     * elevated. Dedup-once: the in-memory set gates the session, the persisted set
+     * survives reload. An EDIT never reaches here (it folds, not a bubble) — the
+     * `envelopeType !== 'edit'` guard is belt-and-braces. */
+    private elevateIfMentioned;
     /** Seed the per-target base text + author for the edit fold. Base is write-once
      * (a later own/peer edit must not overwrite the original we render against). The
      * author is (re)recorded whenever a non-empty resolution is available. */
@@ -999,10 +1142,14 @@ declare class Chat {
     /** Page older messages in. Returns how many were prepended. */
     loadEarlier(limit?: number): Promise<number>;
     private refreshMembers;
+    /** Re-resolve roster display names across the whole transcript (called on a roster
+     * change). Re-emits only if any name actually changed. */
+    private reresolveAllMentionNames;
     private seedMembersFromGroup;
     private seedDraftMembers;
     send(text: string, opts?: {
         replyTo?: ChatMessage;
+        mentions?: MentionRange[];
     }): Promise<SentReceipt>;
     private appendOwnSend;
     private materializeIfNeeded;
@@ -1026,8 +1173,25 @@ declare class Chat {
      * instantly; the durable echo on the next pump is a fold no-op (dedup on the
      * SAME wire clientMsgId). Never appends a bubble; PRESERVES the target's
      * reactions + reply context. Only the original author's edits count — for an own
-     * message self IS the author, so the author-gate passes. */
-    edit(message: ChatMessage, newText: string): Promise<void>;
+     * message self IS the author, so the author-gate passes. `opts.mentions` carries the
+     * edit's REPLACEMENT mention ranges → the edited message's mentions reflect them. */
+    edit(message: ChatMessage, newText: string, opts?: {
+        mentions?: MentionRange[];
+    }): Promise<void>;
+    /** Delete a message for EVERYONE (a cooperative encrypted tombstone). Only the
+     * ORIGINAL SENDER can do this — for an own message self IS the author, so the
+     * author-gate passes. Legacy messages (empty clientMsgId) are DISABLED (a
+     * tombstone keys on the target's clientMsgId, which they lack) — no-op. Sends a
+     * `type:'delete'` envelope through the SAME MLS path as a text message (the
+     * server stays blind), folds the own delete locally so the target scrubs in
+     * place instantly (the durable echo dedups on the SAME wire clientMsgId), and
+     * re-emits. NEVER appends a bubble. delete-for-me'ing the target becomes moot. */
+    deleteForEveryone(message: ChatMessage): Promise<void>;
+    /** Delete a message for ME only — a LOCAL, per-device suppression. NO wire, NO
+     * attribution, no server contact: the message is OMITTED from THIS view and the
+     * suppression key persists per chat (survives reload). The key is the message's
+     * clientMsgId when present, else `seq:<serverSeq>` for legacy messages. */
+    deleteForMe(message: ChatMessage): Promise<void>;
 }
 
 declare class PalbeMessaging {
@@ -1419,4 +1583,4 @@ declare class PalbeAnalytics {
     private post;
 }
 
-export { type AnalyticsProperties as A, type RealtimeConnectionState as B, Call as C, type RealtimeHandler as D, type RealtimePayload as E, type FlagsView as F, type RealtimeStatus as G, type RealtimeStatusSnapshot as H, type RealtimeSubscription as I, type ResolvedReply as J, type PalbeRuntime as K, buildRuntime as L, type MagicLinkResult as M, type OAuthExchangeResult as O, PalbeAnalytics as P, RealtimeChannel as R, type SentReceipt as S, type Unsubscribe as U, type AuthChangeEvent as a, type AuthState as b, type AuthSuccess as c, type AuthUser as d, type CallChangeCallback as e, type CallParticipant as f, type CallState as g, Chat as h, type ChatBackend as i, type ChatDraft as j, type ChatKind as k, type ChatMember as l, type ChatMessage as m, type ChatMessageKind as n, type ChatRole as o, type ChatState as p, type CommsPrefs as q, type MessageDirection as r, PalbeAuth as s, PalbeCalls as t, type PalbeConfig as u, PalbeFlags as v, PalbeMessaging as w, type PalbeOAuthConfig as x, PalbeRealtime as y, type PresenceState as z };
+export { type AnalyticsProperties as A, type PresenceState as B, Call as C, type RealtimeConnectionState as D, type RealtimeHandler as E, type FlagsView as F, type RealtimePayload as G, type RealtimeStatus as H, type RealtimeStatusSnapshot as I, type RealtimeSubscription as J, type ResolvedMention as K, type ResolvedReply as L, type MagicLinkResult as M, type PalbeRuntime as N, type OAuthExchangeResult as O, PalbeAnalytics as P, buildRuntime as Q, RealtimeChannel as R, type SentReceipt as S, type Unsubscribe as U, type AuthChangeEvent as a, type AuthState as b, type AuthSuccess as c, type AuthUser as d, type CallChangeCallback as e, type CallParticipant as f, type CallState as g, Chat as h, type ChatBackend as i, type ChatDraft as j, type ChatKind as k, type ChatMember as l, type ChatMessage as m, type ChatMessageKind as n, type ChatRole as o, type ChatState as p, type CommsPrefs as q, type MentionRange as r, type MessageDirection as s, PalbeAuth as t, PalbeCalls as u, type PalbeConfig as v, PalbeFlags as w, PalbeMessaging as x, type PalbeOAuthConfig as y, PalbeRealtime as z };

package/dist/{analytics-facade-B8UATgS4.d.cts → analytics-facade-DvsLE_qz.d.cts}

@@ -710,6 +710,20 @@ type ChatRole = 'owner' | 'admin' | 'member';
 type MessageDirection = 'incoming' | 'outgoing';
 /** A renderable message kind. `system` = a membership commit / control frame. */
 type ChatMessageKind = 'text' | 'media' | 'system';
+/**
+ * A resolved mention span inside a message body. Produced at decode/merge time by
+ * NORMALIZING the wire `body_ranges` (the pinned `normalizeMentionRangesUtf16`
+ * contract) against the message text, then resolving the `mentionedUserId` to a
+ * roster display name. Offsets are UTF-16 code units, half-open `[start, start+length)`.
+ * `displayName` is `null` when the mentioned user is not in the local roster (the
+ * renderer falls back to the underlying `text` slice). Mirrors iOS `ResolvedMention`.
+ */
+interface ResolvedMention {
+    readonly start: number;
+    readonly length: number;
+    readonly mentionedUserId: string;
+    readonly displayName: string | null;
+}
 /** A participating USER (not a device). For a direct chat: `[me, peer]`. */
 interface ChatMember {
     /** == userId (stable identity). */
@@ -764,6 +778,25 @@ interface ChatMessage {
      * a visible message of its own — it only overlays the target's text + flag.
      */
     readonly edited: boolean;
+    /**
+     * Whether this message has been deleted-for-everyone (a cooperative encrypted
+     * tombstone from the original sender). Defaults to `false`. Once a valid
+     * tombstone folds onto this message it stays `true` (absorbing/sticky within
+     * retention). A deleted message renders ONLY the neutral "deleted" descriptor
+     * as its `text`, with reactions + reply + edit HIDDEN — delete DOMINATES edit.
+     * A delete is never a visible message of its own. (delete-for-me is a separate,
+     * local-only suppression that omits the message from this view entirely.)
+     */
+    readonly isDeleted: boolean;
+    /**
+     * The resolved mention spans on this message (defaults to `[]`). A mention is a
+     * NORMAL bubble — these spans only annotate the existing `text` for highlighting,
+     * they never make a message non-bubble. Recomputed by the Chat as the roster
+     * resolves (display names are live, not snapshotted). When this message is
+     * tombstoned (deleted-for-everyone) the spans are scrubbed to `[]` (delete
+     * DOMINATES); when it is edited they reflect the EDIT's replacement `body_ranges`.
+     */
+    readonly mentions: ResolvedMention[];
 }
 /** The receipt from a send — the server's monotonic sequence + accepted epoch. */
 interface SentReceipt {
@@ -804,6 +837,15 @@ interface ReplyRef {
     client_msg_id: string;
     preview?: QuotePreview;
 }
+/** A single mention range inside a message body.
+ * Offsets are UTF-16 code units, half-open [start, start+length).
+ * Wire: snake_case (mentioned_user_id, body_ranges) — web does RAW JSON, no case-convert.
+ */
+interface MentionRange {
+    start: number;
+    length: number;
+    mentionedUserId: string;
+}
 interface ReactionPayload {
     targetClientMsgId: string;
     emoji: string;
@@ -813,6 +855,10 @@ interface EditPayload {
     targetClientMsgId: string;
     newText: string;
 }
+interface DeletePayload {
+    targetClientMsgId: string;
+    scope: string;
+}
 
 /** A decoded incoming message handed to chat listeners. */
 interface IncomingMessage {
@@ -839,6 +885,14 @@ interface IncomingMessage {
     /** The decoded edit payload, present only when `envelopeType === 'edit'`. Lets
      * the Chat route an edit into its EditFold instead of appending a visible bubble. */
     edit?: EditPayload | null;
+    /** The decoded delete payload, present only when `envelopeType === 'delete'`. Lets
+     * the Chat route a delete-for-everyone tombstone into its DeleteFold instead of
+     * appending a visible bubble. */
+    delete?: DeletePayload | null;
+    /** The decoded mention ranges (raw, un-normalized). Present on a `'text'` bubble
+     * with `body_ranges` OR on an `'edit'` (the edit's replacement ranges). The Chat
+     * normalizes + resolves roster names → `ChatMessage.mentions` (mentions T6). */
+    bodyRanges?: MentionRange[] | null;
 }
 
 /** The intended participants of a draft chat (held until the first send). */
@@ -858,7 +912,7 @@ interface ChatBackend {
     selfUserId: string;
     /** Materialize a draft → the active group (DM get-or-create / group create+add). */
     materialize(draft: ChatDraft): Promise<MessagingGroup>;
-    sendText(group: MessagingGroup, text: string, replyTo?: ReplyRef | null): Promise<{
+    sendText(group: MessagingGroup, text: string, replyTo?: ReplyRef | null, bodyRanges?: MentionRange[] | null): Promise<{
         receipt: SentReceipt;
         clientMsgId: string;
     }>;
@@ -879,6 +933,17 @@ interface ChatBackend {
         clientMsgId: string;
         targetClientMsgId: string;
         newText: string;
+        bodyRanges?: MentionRange[] | null;
+    }): Promise<{
+        receipt: SentReceipt;
+        clientMsgId: string;
+    }>;
+    /** Send a delete-for-everyone tombstone on a target message through the same MLS
+     * application path as `sendText` (the server stays blind — a delete is just
+     * another opaque application message). Returns the receipt + the wire clientMsgId. */
+    sendDelete(group: MessagingGroup, args: {
+        clientMsgId: string;
+        targetClientMsgId: string;
     }): Promise<{
         receipt: SentReceipt;
         clientMsgId: string;
@@ -895,6 +960,15 @@ interface ChatBackend {
     subscribeLive(group: MessagingGroup, chat: Chat): Unsubscribe$1;
     /** Resolve a sender device id → its owning user id (for senderUserId). */
     userIdForDevice(group: MessagingGroup, deviceId: string): Promise<string | null>;
+    /** Load this chat's persisted delete-for-me suppression keys (durable, no wire). */
+    loadSuppressed(group: MessagingGroup): Promise<string[]>;
+    /** Persist this chat's delete-for-me suppression keys (durable, no wire). */
+    saveSuppressed(group: MessagingGroup, keys: string[]): Promise<void>;
+    /** Load this chat's persisted self-elevation dedup keys (durable, no wire) so a
+     * re-delivered mention does not re-fire `onMentionElevation` after a cold launch. */
+    loadElevated(group: MessagingGroup): Promise<string[]>;
+    /** Persist this chat's self-elevation dedup keys (durable, no wire). */
+    saveElevated(group: MessagingGroup, keys: string[]): Promise<void>;
 }
 declare class Chat {
     /** Stable, URL/log-safe id (the grp_ display id once active; a reserved local id while draft). */
@@ -917,6 +991,22 @@ declare class Chat {
     private readonly reactionFold;
     /** The single authoritative edit fold for this chat (live + own-send + history). */
     private readonly editFold;
+    /** The single authoritative delete-for-everyone fold (live + own-send + history).
+     * A tombstone scrubs its target in place (delete DOMINATES edit at render). */
+    private readonly deleteFold;
+    /** delete-for-me suppression keys (clientMsgId, or `seq:<serverSeq>` for legacy)
+     * — the message is OMITTED from this view. Local + persisted per chat, NO wire. */
+    private readonly suppressed;
+    /** True once the persisted suppression set has been loaded (so the omit applies
+     * even on the cold-launch hydrate path before a fresh deleteForMe). */
+    private suppressedLoaded;
+    /** Self-elevation dedup keys (`<selfUserId>|<clientMsgId or seq:n>`). Once a
+     * mention of me from another sender fires `onMentionElevation`, its key lands here
+     * + is persisted, so a re-delivery / cold-launch re-hydrate never re-fires. */
+    private readonly elevated;
+    /** True once the persisted elevation set has been loaded (so a re-delivered mention
+     * on the cold-launch hydrate path dedups against the persisted decision). */
+    private elevatedLoaded;
     /** Per-target BASE (original) text, so the rendered text is `edit ?? original`.
      * Seeded once per target (write-once base) so a 2nd own edit can't corrupt it. */
     private readonly originalTextByClientMsgId;
@@ -928,6 +1018,14 @@ declare class Chat {
     private wired;
     private liveUnsub;
     private readonly listeners;
+    /**
+     * Fires ONCE per `(selfUserId, clientMsgId)` when an INCOMING message mentions THIS
+     * user from ANOTHER sender (not an edit). The dedup survives re-delivery + reload
+     * via the persisted elevation set, so this never double-fires for one mention. The
+     * app wires it to a buzz/badge (e.g. an in-app banner). Best-effort cooperative —
+     * the SDK guarantees the DECISION, not the buzz. Mirrors iOS `Chat.onMentionElevation`.
+     */
+    onMentionElevation?: (message: ChatMessage) => void;
     /** @internal — obtain via pb.messaging.directChat / groupChat / chat(id). */
     constructor(args: {
         group: MessagingGroup;
@@ -948,9 +1046,29 @@ declare class Chat {
     get typing(): readonly ChatMember[];
     get lastMessage(): ChatMessage | null;
     get unreadCount(): number;
+    /**
+     * The RENDER PRECEDENCE — the single composition point (live AND history project
+     * through it identically). Over the raw `messageList` (which already carries the
+     * folded edit text + reactions + reply):
+     *   (1) in the delete-for-me suppression set → OMIT the message entirely;
+     *   (2) else tombstoned (delete-for-everyone) → the neutral "deleted" descriptor
+     *       with reactions/reply/edit HIDDEN (delete DOMINATES edit — short-circuit);
+     *   (3) else the row as-is (edit overlay + reactions + reply already applied).
+     * Pure over (messageList, deleteFold, suppressed) — recomputed on every read so a
+     * just-folded delete / just-suppressed key takes effect without rewriting rows.
+     */
+    private surfaced;
+    /** The delete-for-me suppression key: clientMsgId when present, else `seq:<n>`. */
+    private suppressionKey;
     get title(): string;
     presence(userId: string): PresenceState | null;
     private ensureWired;
+    /** Hydrate the persisted delete-for-me suppression keys (once), then re-emit so
+     * any already-surfaced suppressed message is omitted (cold-launch parity). */
+    private loadSuppressed;
+    /** Hydrate the persisted self-elevation dedup keys (once). No re-emit: the set only
+     * gates the elevation DECISION, it does not change what renders. */
+    private loadElevated;
     private hydrateHistory;
     private mergeHistory;
     /** @internal — called by the backend's live subscription. */
@@ -959,6 +1077,31 @@ declare class Chat {
      * (null = target unknown/dangling → the fold HOLDs). Captured as a bound arrow
      * so it can be passed to the pure EditFold. */
     private readonly authorOfTarget;
+    /** Resolve a message's decode-time mention spans: NORMALIZE the raw `body_ranges`
+     * against `text` (the pinned `normalizeMentionRangesUtf16` cross-SDK contract) then
+     * resolve each surviving range's `mentionedUserId` to a roster display name. An id
+     * not in the roster resolves to `null` (the renderer falls back to the `text` slice).
+     * Pure over (text, bodyRanges, memberCache); never throws. Mirrors iOS T3. */
+    private resolveMentions;
+    /** Re-resolve the roster display name on already-NORMALIZED spans (the history
+     * projection produces them with null names — resolution is LIVE, not snapshotted).
+     * A member rename then reflects on old messages. Returns the message unchanged when
+     * it has no mentions (the common case) or no name changed. Mirrors iOS T3. */
+    private resolveMentionNames;
+    /** The WINNING edit's resolved mentions for a target (normalize its replacement
+     * ranges against the new text + roster names), or `[]` if no winning edit / no
+     * ranges. The edited message's mentions reflect the EDIT's ranges (mirrors iOS T3). */
+    private editMentions;
+    /** Resolve a userId → its roster display name (null if not a known member). */
+    private displayNameOf;
+    /** Compute the SELF-ELEVATION decision for a freshly-ingested INCOMING bubble and,
+     * when it fires, record the dedup key (persisted) + invoke `onMentionElevation`.
+     * Gate (mirrors iOS T3): a surviving mention targets THIS user AND the sender is not
+     * me AND it's NOT an edit AND the `(selfUserId, clientMsgId|seq)` key isn't already
+     * elevated. Dedup-once: the in-memory set gates the session, the persisted set
+     * survives reload. An EDIT never reaches here (it folds, not a bubble) — the
+     * `envelopeType !== 'edit'` guard is belt-and-braces. */
+    private elevateIfMentioned;
     /** Seed the per-target base text + author for the edit fold. Base is write-once
      * (a later own/peer edit must not overwrite the original we render against). The
      * author is (re)recorded whenever a non-empty resolution is available. */
@@ -999,10 +1142,14 @@ declare class Chat {
     /** Page older messages in. Returns how many were prepended. */
     loadEarlier(limit?: number): Promise<number>;
     private refreshMembers;
+    /** Re-resolve roster display names across the whole transcript (called on a roster
+     * change). Re-emits only if any name actually changed. */
+    private reresolveAllMentionNames;
     private seedMembersFromGroup;
     private seedDraftMembers;
     send(text: string, opts?: {
         replyTo?: ChatMessage;
+        mentions?: MentionRange[];
     }): Promise<SentReceipt>;
     private appendOwnSend;
     private materializeIfNeeded;
@@ -1026,8 +1173,25 @@ declare class Chat {
      * instantly; the durable echo on the next pump is a fold no-op (dedup on the
      * SAME wire clientMsgId). Never appends a bubble; PRESERVES the target's
      * reactions + reply context. Only the original author's edits count — for an own
-     * message self IS the author, so the author-gate passes. */
-    edit(message: ChatMessage, newText: string): Promise<void>;
+     * message self IS the author, so the author-gate passes. `opts.mentions` carries the
+     * edit's REPLACEMENT mention ranges → the edited message's mentions reflect them. */
+    edit(message: ChatMessage, newText: string, opts?: {
+        mentions?: MentionRange[];
+    }): Promise<void>;
+    /** Delete a message for EVERYONE (a cooperative encrypted tombstone). Only the
+     * ORIGINAL SENDER can do this — for an own message self IS the author, so the
+     * author-gate passes. Legacy messages (empty clientMsgId) are DISABLED (a
+     * tombstone keys on the target's clientMsgId, which they lack) — no-op. Sends a
+     * `type:'delete'` envelope through the SAME MLS path as a text message (the
+     * server stays blind), folds the own delete locally so the target scrubs in
+     * place instantly (the durable echo dedups on the SAME wire clientMsgId), and
+     * re-emits. NEVER appends a bubble. delete-for-me'ing the target becomes moot. */
+    deleteForEveryone(message: ChatMessage): Promise<void>;
+    /** Delete a message for ME only — a LOCAL, per-device suppression. NO wire, NO
+     * attribution, no server contact: the message is OMITTED from THIS view and the
+     * suppression key persists per chat (survives reload). The key is the message's
+     * clientMsgId when present, else `seq:<serverSeq>` for legacy messages. */
+    deleteForMe(message: ChatMessage): Promise<void>;
 }
 
 declare class PalbeMessaging {
@@ -1419,4 +1583,4 @@ declare class PalbeAnalytics {
     private post;
 }
 
-export { type AnalyticsProperties as A, type RealtimeConnectionState as B, Call as C, type RealtimeHandler as D, type RealtimePayload as E, type FlagsView as F, type RealtimeStatus as G, type RealtimeStatusSnapshot as H, type RealtimeSubscription as I, type ResolvedReply as J, type PalbeRuntime as K, buildRuntime as L, type MagicLinkResult as M, type OAuthExchangeResult as O, PalbeAnalytics as P, RealtimeChannel as R, type SentReceipt as S, type Unsubscribe as U, type AuthChangeEvent as a, type AuthState as b, type AuthSuccess as c, type AuthUser as d, type CallChangeCallback as e, type CallParticipant as f, type CallState as g, Chat as h, type ChatBackend as i, type ChatDraft as j, type ChatKind as k, type ChatMember as l, type ChatMessage as m, type ChatMessageKind as n, type ChatRole as o, type ChatState as p, type CommsPrefs as q, type MessageDirection as r, PalbeAuth as s, PalbeCalls as t, type PalbeConfig as u, PalbeFlags as v, PalbeMessaging as w, type PalbeOAuthConfig as x, PalbeRealtime as y, type PresenceState as z };
+export { type AnalyticsProperties as A, type PresenceState as B, Call as C, type RealtimeConnectionState as D, type RealtimeHandler as E, type FlagsView as F, type RealtimePayload as G, type RealtimeStatus as H, type RealtimeStatusSnapshot as I, type RealtimeSubscription as J, type ResolvedMention as K, type ResolvedReply as L, type MagicLinkResult as M, type PalbeRuntime as N, type OAuthExchangeResult as O, PalbeAnalytics as P, buildRuntime as Q, RealtimeChannel as R, type SentReceipt as S, type Unsubscribe as U, type AuthChangeEvent as a, type AuthState as b, type AuthSuccess as c, type AuthUser as d, type CallChangeCallback as e, type CallParticipant as f, type CallState as g, Chat as h, type ChatBackend as i, type ChatDraft as j, type ChatKind as k, type ChatMember as l, type ChatMessage as m, type ChatMessageKind as n, type ChatRole as o, type ChatState as p, type CommsPrefs as q, type MentionRange as r, type MessageDirection as s, PalbeAuth as t, PalbeCalls as u, type PalbeConfig as v, PalbeFlags as w, PalbeMessaging as x, type PalbeOAuthConfig as y, PalbeRealtime as z };