@robono/messaging-react-native 0.0.0-stage → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,19 @@
+# Changelog
+
+## 0.2.0
+
+Use the compact Messenger media toolbar, autoplay video after audio setup, and offer native full-screen playback. Dismiss iOS menus before presenting Saved media, Forward/Delete/Report or Search; keep native pickers free of a competing modal. Reserve the actual timestamp width so edited messages do not overlap it.
+
+Add shared Edit/Delete actions, draft-preserving composer editing, delete confirmation and search/quote navigation. Media adapters report opening/playback independently of bubble visibility. Media replacement/removal, authorized forwarding, persistent Saved copies and native outgoing draft recovery are implemented. Physical iPhone checks cover selected flows; physical Android acceptance remains outstanding.
+
+Add text/voice translation to text or voice, shared translation popup, browser/Expo spoken playback and expiring-result cleanup. Add optional viewer downloads (off by default): device photo library, iPhone Save to Files sheet and bounded Android folder export. Streamed video exports an authorized local copy without replacing playback. Requires expo-file-system >=55.0.5. iPhone checks cover playback, Saved files, restart recovery and popup transitions. Android device acceptance and physical export-sheet checks remain pending.
+
+Add `MessagingInbox`, the shared search popup and optional expiring typing/online labels in the existing header. Clear private unread counts independently of public read receipts. Closed polls disable their controls on both native and web renderers. Requires the matching 0.2.0 core release; iPhone fixture acceptance is recorded separately from Android acceptance.
+
+Render unfinished sends as ordinary chat bubbles with compact status icons and in-place retry. Keep the composer available during attachment sends. Stage browser and Expo attachments locally until Send; add native thumbnails and preview without consuming the draft.
+
+Use the server-provided total member count for large groups instead of counting a partial member page.
+
+## 0.1.0
+
+Optional messaging screens and media controls, attachment composer, recording, playback, quoting, reactions, polls, translation, transcription, block and report flows. Expo adapters and optional calling integration.

package/LICENSE

@@ -0,0 +1,130 @@
+ROBONO SDK LICENSE AGREEMENT
+Version 1.0, July 20, 2026
+
+Copyright (c) 2026 Add to Loop LLC. All rights reserved.
+
+This Robono SDK License Agreement (the "Agreement") is between Add to Loop LLC,
+operating the Robono service ("Robono"), and the person or entity that downloads,
+installs, copies, or uses the Software ("You"). By downloading, installing,
+copying, or using the Software, You accept this Agreement. If You do not accept
+it, do not use the Software.
+
+1. Definitions
+
+"Software" means this Robono software development kit, its documentation, and
+any updates Robono provides under this Agreement.
+
+"Robono Service" means the messaging interoperability, routing, policy,
+conversion, delivery, and related services operated or expressly authorized by
+Robono.
+
+"Application" means a product or service owned or controlled by You that is
+authorized to connect to the Robono Service.
+
+2. Limited License
+
+Subject to this Agreement, Robono grants You a limited, non-exclusive,
+non-transferable, non-sublicensable, revocable license to:
+
+(a) install, copy, and use the Software internally to develop, test, and
+operate an Application that communicates with the Robono Service; and
+
+(b) reproduce and distribute the portions of the Software that are necessarily
+included in Your Application, solely in compiled, minified, bundled, or object
+code form and solely as needed for that Application to communicate with the
+Robono Service.
+
+No right is granted to distribute the Software as a standalone product or SDK.
+
+3. Restrictions
+
+You may not, and may not permit another person to:
+
+(a) sell, rent, lease, sublicense, publish, or redistribute the Software as a
+standalone product, library, SDK, or service;
+
+(b) use the Software or a modified or derivative version of it to develop,
+provide, or support a product or service that competes with the Robono Service;
+
+(c) use the Software to bypass Robono, avoid applicable usage controls or fees,
+or access the Robono Service without authorization;
+
+(d) remove or alter copyright, trademark, attribution, or proprietary notices;
+
+(e) reverse engineer, decompile, or disassemble the Software except to the
+limited extent applicable law expressly prohibits this restriction; or
+
+(f) use the Software in violation of applicable law, the rights of another
+person, or the terms governing access to the Robono Service.
+
+4. Ownership and Reserved Rights
+
+The Software is licensed, not sold. Robono and its licensors retain all right,
+title, and interest in the Software and all related intellectual property.
+Except for the limited rights expressly granted in Section 2, all rights are
+reserved.
+
+No patent license is granted except the minimum license, if any, necessarily
+required to exercise the rights expressly granted in Section 2, and that
+limited patent license applies only while the Software is used with an
+authorized Robono Service.
+
+5. Service Access
+
+This Agreement does not itself grant an account, API credentials, service
+availability, support, or a right to access the Robono Service. Service access
+may be governed by additional terms, plans, limits, and policies. Robono may
+suspend or terminate access to protect users, systems, legal compliance, or the
+integrity of the Robono Service.
+
+6. Updates and Support
+
+Robono is not required to provide maintenance, updates, support, or continued
+availability of any version of the Software unless separately agreed in
+writing.
+
+7. Term and Termination
+
+This Agreement continues until terminated. Your rights terminate automatically
+if You breach this Agreement. On termination, You must stop using the Software
+and delete copies under Your control, except for copies necessarily contained
+in previously distributed Applications. Sections 3, 4, 8, 9, 10, and 11
+survive termination.
+
+8. Disclaimer of Warranties
+
+TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SOFTWARE IS PROVIDED "AS IS" AND
+"AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS, IMPLIED, OR
+STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+PURPOSE, TITLE, AND NON-INFRINGEMENT.
+
+9. Limitation of Liability
+
+TO THE MAXIMUM EXTENT PERMITTED BY LAW, ROBONO WILL NOT BE LIABLE FOR INDIRECT,
+INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS
+OF DATA, REVENUE, PROFITS, GOODWILL, OR BUSINESS OPPORTUNITY, ARISING FROM OR
+RELATING TO THE SOFTWARE. ROBONO'S TOTAL LIABILITY RELATING TO THE SOFTWARE
+WILL NOT EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS (US $100) OR THE AMOUNT
+YOU PAID ROBONO FOR THE SOFTWARE DURING THE TWELVE MONTHS BEFORE THE EVENT
+GIVING RISE TO THE CLAIM. THESE LIMITATIONS APPLY TO THE MAXIMUM EXTENT
+PERMITTED BY LAW.
+
+10. Governing Law
+
+This Agreement is governed by the laws of the State of Florida, excluding its
+conflict-of-laws rules. The state and federal courts located in Palm Beach
+County, Florida have exclusive jurisdiction, and each party consents to their
+jurisdiction and venue.
+
+11. General
+
+You may not assign this Agreement without Robono's prior written consent.
+Robono may assign this Agreement in connection with a reorganization, transfer
+of intellectual property, financing, merger, acquisition, or sale of all or
+substantially all of the relevant assets. If a provision is unenforceable, it
+will be enforced to the maximum extent permitted and the remaining provisions
+will remain effective. A waiver must be in writing. This Agreement is the
+entire agreement concerning the Software unless You and Robono sign a separate
+written agreement that expressly replaces it.
+
+Questions about this license may be submitted at https://robono.com/contact.

package/README.md

@@ -1,3 +1,241 @@
-# Temporary Holding Version
+# Optional Robono messaging screens
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Use a ready-made direct or group conversation screen, replace its sections, or compose the exported components into your own layout. This package is optional and adds no navigation, global audio configuration or push handlers to your app. The shared icon controls require `react-native-svg` (install it with your framework’s native dependency installer).
+
+```tsx
+import {MessagingScreen} from '@robono/messaging-react-native';
+
+<MessagingScreen
+  client={messagingClient}
+  userId={session.userId}
+  contact={{name: contact.displayName, avatarUrl: contact.avatarUrl}}
+  active={isConversationFocused}
+  onBack={navigation.goBack}
+  onMessageOptions={message => navigation.openMessageActions(message)}
+  pickAttachment={(kind, limits) => media.pickAndUpload(kind, limits)}
+  openAttachment={message => media.openAuthorized(message.media!.assetId)}
+/>
+```
+
+The client is from `@robono/messaging`; initialize it with the authenticated backend transport and open the conversation before rendering. Your existing navigation, account/contact services and private media store supply the referenced callbacks. Mount inside your safe area. Pause polling in the background and dispose the client when the user signs out. No separate Robono end-user account is needed.
+
+Enabled message kinds come from the server. In text-only mode there are no attachment controls. Voice-only mode has no text field. `pickAttachment(kind, {maxDurationMs})` receives the configured voice limit. Stop recording at that limit on both iOS and Android and show the remaining time. Cancel without sending when recording fails. Your backend must check the actual file duration too. The recorder displays the limit, and the client rejects oversized recordings before sending. `pickAttachment` handles the device picker or recording flow, uploads privately, and returns an asset reference or `null` on cancellation. `openAttachment` checks access through your backend and uses your media viewer/player. A missing callback never sends a fabricated attachment. Connect safety callbacks to your app's existing report/block actions.
+
+## Message presentation and camera
+
+Text uses a send icon; `appearance.labels.send` remains its accessible label. Voice messages show a play control, waveform area and duration. Photos and videos use thumbnail bubbles, and files show a document icon, filename, type and size. Sent and received messages use the corresponding colors and alignment.
+
+Supply `attachmentPreview(message)` to resolve `{uri?, waveform?}` after checking the current user's media access. `uri` is an image thumbnail (a poster frame for video); `waveform` contains 32 normalized amplitude values between 0 and 1. These stay in component state, not in the message payload. Without metadata the SDK shows a neutral media tile or waveform track. `openAttachment` remains responsible for authorized media access. The Expo screen supplies inline voice playback and the shared full-screen media viewer. To connect a different audio engine, supply `components.VoiceMessage` and render the exported `VoicePlayback` with its playback state and callbacks. `MediaViewer`, `ZoomablePhoto` and `MediaPlaybackControls` are also exported for hosts with their own media engines.
+
+Photos, videos and files share an Attach menu. Set `appearance.showCamera` to offer Camera alongside them; photo messaging must also be enabled. The option defaults off for existing integrations. Camera calls `pickAttachment('image', {...limits, source: 'camera'})`, so captures follow the same photo restrictions and review/upload process. Hosts supplying their own media callback must handle that source explicitly. The Expo adapter requests camera permission only on selection and opens the device camera on iOS and Android. Configure the `expo-image-picker` plugin's `cameraPermission` explanation in your native build. Cancelling or refusing permission sends nothing.
+
+## Reuse or replace components
+
+The screen accepts `components={{Header, Message, List, Composer}}`. Replacements read the same client state, theme, selected reply and callbacks through `useMessagingUI()`.
+
+For complete layout control, wrap `MessagingHeader`, `MessagingList` and `MessagingComposer` in `MessagingProvider`. Use `MessagingBubble` for the standard message view. Supply only the components you want. The headless client works without this package.
+
+Appearance comes from the selected integration's Messaging page, with an optional per-screen `appearance` override. The service still enforces message permissions even when your UI is fully custom. A local appearance override cannot change permissions.
+
+The same React Native components support iOS and Android. Keyboard handling uses iOS padding and Android's host window configuration. Your host app owns microphone/library permissions, media audio focus, foreground notification behavior and navigation. Report component inventory through `client.reportUsage`; it is distinct from accepted-message usage.
+
+## Recording and attachments with Expo
+
+The optional `@robono/messaging-react-native/expo` entry supplies recording, review, voice playback and seeking, photo/video picking and preview, document selection, and private upload/download progress. Users explicitly send after review. A failed upload can retry with the same upload identity; cancelling removes the adapter's cache copy, never the original library item. Viewer copies are removed when the viewer closes. Managed voice and video play directly from private storage using native streaming. By default, `ExpoMessagingScreen` preloads up to six recent photos in the open conversation (2 MiB per file, 6 MiB total, two background transfers at a time). Custom adapters without streaming can also preload small voice/video attachments within those limits. Each transfer uses the authenticated storage adapter and counts as normal transfer usage. The cache is cleared when the app backgrounds, the conversation changes, access fails, or messages disappear; cached files require a fresh download on opening if their message has not been refreshed from the conversation history within 60 seconds. Voice/video streams and document downloads start only on tap. Set `preloadRecentMedia={false}` to keep all media transfers on demand. The recorder reserves 100 milliseconds at the duration limit for encoder padding; storage completion verifies the finished file. Recording stops when the app backgrounds or a call takes audio priority, leaving a review rather than sending automatically.
+
+Install native dependencies with your Expo project's installer so their versions match your SDK:
+
+```sh
+npx expo install expo-audio expo-image-picker expo-document-picker expo-file-system expo-sharing expo-video expo-crypto react-native-safe-area-context react-native-svg
+```
+
+This entry targets Expo SDK 55–56; the core components do not require Expo. Configure the `expo-audio` plugin's `microphonePermission` with your app's explanation (for example, “Allow microphone access to record voice messages”). Keep background recording disabled. Native dependency or permission changes need a new development/store build; screen changes do not. The standard system photo picker does not require full photo-library access. Documents use the platform's file picker, without broad storage access.
+
+```tsx
+import {
+  ExpoMessagingScreen, createExpoMessagingStorage,
+  createExpoMessagingAudioSession, createExpoMessagingClient,
+} from '@robono/messaging-react-native/expo';
+
+const messagingClient = createExpoMessagingClient({
+  url: appConfig.messagingEndpoint,
+  userId: session.userId,
+  getAccessToken: () => sessions.accessToken(),
+});
+
+const storage = createExpoMessagingStorage({
+  url: appConfig.messagingMediaEndpoint,
+  getAccessToken: () => sessions.accessToken(),
+});
+const audioSession = createExpoMessagingAudioSession({
+  isCallActive: () => calls.isActive(),
+});
+
+<ExpoMessagingScreen
+  client={messagingClient}
+  userId={session.userId}
+  contact={{name: contact.displayName, avatarUrl: contact.avatarUrl}}
+  active={isConversationFocused}
+  onBack={navigation.goBack}
+  storage={storage}
+  audioSession={audioSession}
+  onMessageOptions={message => navigation.openMessageActions(message)}
+/>
+```
+
+Open the conversation with `await messagingClient.open(conversationId)`, then call `messagingClient.start()` while it is active. Call `stop()` when it backgrounds and `start()` when it returns; call `dispose()` when the owning client is no longer used. The screen subscribes to the client but does not own its polling lifecycle.
+
+Managed attachment history includes short-lived download authorization. The Expo adapter uses it to begin a fresh transfer without another authorization request; absent, mismatched or expired grants use the authenticated media endpoint. Keep grants in memory only and out of logs and persisted chat history. The bucket remains private. As with other issued transfer links, revocation can leave an already issued link usable for up to 60 seconds, unless the object has already been removed.
+
+Managed voice messages and videos use progressive streaming: the native player can start before the complete original file has downloaded and request byte ranges when seeking. No lower-resolution copy or new streaming subscription is required. Photos and documents retain verified whole-file downloads. Set `streaming: false` in `createExpoMessagingStorage` to use whole-file downloads for voice/video too. Custom `MessagingMediaStorage` adapters may implement optional `stream(message, context)` returning `{...metadata, uri, stream: {headers?}}`; omit it or return `null` to use `download`.
+
+If native streaming fails or a later range request encounters an expired link, the screen makes one recovery attempt through the existing authorized download path, preserving playback position and whether playback was paused. Denied access still fails; it does not bypass authorization or loop retries. Native buffers are temporary; streaming URLs and headers must never be persisted. Usage counts bytes served, including additional ranges or recovery downloads, rather than treating each range as a whole-file download.
+
+The adapter prepares private file storage alongside download authorization, and prepares voice audio output alongside native file loading. Transfers still require authorization; playback waits for native media readiness and the audio session. Video rendering can prepare while audio initializes, with playback controls enabled only after audio is ready.
+
+For performance measurement, `onMediaReady` reports `{messageId, kind, stage, elapsedMs}` from a photo's load, a video's first frame or advancing voice playback. Disable preloading to measure on-demand media startup. Streaming readiness means the player has usable data, not that it downloaded the whole file. This callback does not measure the exact audible onset at the speaker.
+
+Create stable storage and audio-session instances outside rendering or with `useMemo`. Mount within your existing `SafeAreaProvider`. If your app already coordinates calls and media, supply its own `MessagingAudioSession.acquire()` lease instead. A lease returns an idempotent release function. `isAvailable()` must return false while a call owns audio. The supplied coordinator stops media when that guard changes and avoids overwriting the call's audio mode. Your call integration remains responsible for acquiring its own native audio session.
+
+Photos, Videos and Files each have an allowed MIME-type list and maximum file size. Videos also have a duration limit. Files cannot be used to bypass image, video or voice restrictions. A phone may list more formats than the app allows; selection is checked before upload and again against verified metadata on the backend. Allowing a container format does not guarantee that every codec in it plays on every device. Choose formats compatible with your supported phones, or convert media in your storage pipeline. Documents open the native share/open menu; installed document viewers vary by phone.
+
+The bundled adapter uses your private storage endpoint, described below. You can instead implement `MessagingMediaStorage` with your existing upload/download service, or use the core `MessagingScreen` callbacks. None of these screens or adapters is mandatory.
+
+## Private media endpoint
+
+Mount `createMessagingMediaBackendAdapter` from `@robono/server` behind your existing session authentication. Supply the same `RobonoMessagingBackend` as your messaging endpoint, your authorization checks, and a `MessagingPrivateStorage` implementation for your storage provider. The adapter checks current conversation access and policy before asking storage for a transfer. Phone requests never contain Robono API keys or storage credentials.
+
+The storage implementation has four operations:
+
+- `prepare`: persist upload ID, actor, conversation, message kind and proposed metadata together; return a short-lived private HTTPS PUT URL and required headers. Retrying the same upload ID must resolve the same upload. Reject conflicting reuse.
+- `complete`: verify that actor/conversation own the upload; inspect the stored bytes to determine the actual format, size and recording/video duration. Return the persisted kind and verified metadata. A filename, extension or phone-provided MIME type is not verification. Repeated completion must return the same asset.
+- `download`: return a short-lived private HTTPS URL for the authorized message's asset. Robono checks that the message still exists; storage also verifies its asset belongs to that message/conversation.
+- `discard`: revoke/delete only that actor's uncommitted upload. It must be safe to repeat, including after a lost completion response, and must never delete an asset already referenced by an accepted message.
+
+The HTTP protocol uses POST with `{operation, ...}`. `prepare` takes `uploadId`, `conversationId`, `kind`, and `file` metadata; it returns `{url, headers?}` or `{media}` for an already verified upload. `complete` takes `uploadId` and `conversationId`, returning `{media}`. `download` takes `conversationId` and `messageId`, returning `{url, headers?, media}`. `discard` takes `uploadId`, returning `{ok:true}`. Errors use `{error:{code,message}}` and an appropriate HTTP status.
+
+Also supply `resolveMedia` to `createMessagingBackendAdapter`, resolving the authenticated actor, conversation and asset ID to your verified stored metadata. This replaces untrusted phone claims before sending. Keep asset IDs opaque and unique per message. Check blocks/permissions in both endpoints. Restrict signed uploads to the prepared object and size where supported; delete rejected objects. Expire abandoned uploads and private cache files through your storage lifecycle. Your app owns storage and any malware/content checks appropriate to its policy; the SDK does not upload files to public storage or scan private conversations.
+
+Handle signed `messaging.message_removed` events to revoke and delete assets when history expires. Account deletion must also erase associated storage. A terminated app cannot run cache cleanup; the adapter's temporary files live under the OS cache directory, which can be purged by the OS. Do not treat device cache eviction as a fixed retention guarantee.
+
+
+### Design messaging and calling together
+
+The website Experience builder renders these messaging components and the optional calling components, with a local conversation transport. Saving a draft creates an immutable design version without changing active settings. Review and apply updates messaging and calling atomically, with revision checks against the existing editors. Use your existing settings/appearance fetches to receive the applied design. Service access and per-contact eligibility still apply.
+
+For a conversation header with an optional voice-call action:
+
+```tsx
+import { MessagingCallingScreen } from '@robono/messaging-react-native/calling';
+
+<MessagingCallingScreen
+  client={messagingClient}
+  userId={signedInUserId}
+  contact={contact}
+  onCall={voiceAvailable ? () => callingController.call(connectionId, contact) : undefined}
+/>
+```
+
+The `/calling` entry additionally needs the optional `@robono/calling-react-native` peer. Mount the calling overlay and configure native audio/notifications through the existing calling integration. This entry creates no call client and requests no permission. Omit `onCall` to hide the action; backend admission remains authoritative. `MessagingHeader` also accepts children for custom header actions.
+
+The website preview renders the same bubbles, inline voice controls, full-screen photo/file viewer and video transport controls through React Native Web. Phone/tablet and portrait/landscape choices resize the real layout viewport without reloading the conversation. Browser media elements and Expo players drive the shared controls; the browser preview does not substitute native browser player controls or a generic dialog. Camera/library/file selection and OS permission prompts still follow the platform. Preview interactions never contact real users or send billable events.
+
+The standard chat uses compact grouped bubbles, timestamps at the lower right, inline voice controls and an expandable attachment tray below the composer. Attach dismisses the keyboard; tap it again to return to typing. Android Back closes the tray first. The microphone remains available beside the text field, including while text is typed; Send is enabled when there is text or a finished voice recording. Camera remains available when capture is enabled, including with typed text or a reviewed voice recording. Captures join the existing pending attachments. New designs start with a light chat palette; existing saved colors remain unchanged. The builder’s “Use classic chat colors” action applies the default palette to the draft without changing enabled features.
+
+Voice-only conversations use Robono Messenger’s compact composer: the duration-limit placeholder, embedded microphone and adjacent Send control. The Expo adapter records and reviews audio inline, with elapsed time, microphone metering, playback and removal before sending. The builder uses the same controls with a local browser microphone recording; no audio is uploaded from the preview. When texting is enabled, tap the microphone to record in the composer and tap it again to stop. Each completed recording becomes a separate playable attachment in the shared horizontal row, and the microphone is available for another recording. Typed text is preserved; Send puts accompanying text on the last attachment as its caption. Custom media adapters can use `components.VoiceComposer`, `VoiceMessageComposer` and `VoiceDraftPlayback`; `renderTextComposer` restores the text controls alongside the reviewed recording.
+
+Recent attachments can appear directly beneath the attachment buttons. Photos, Videos and Document filter this strip; tapping the selected category again shows all enabled types. Tapping a thumbnail adds it above the composer as a pending attachment; its magnifying-glass button opens a preview instead. Remove unwanted attachments or press Send to submit the selection with any typed text. Camera starts capture. When no recent-media source is supplied, the category buttons open the device picker. Supply `attachmentChoices` with an ID, kind, name, and optional thumbnail URI/duration. Only enabled attachment types appear. With `MessagingScreen`, selecting a tile calls `pickAttachment` with `options.attachmentId`; use `options.intent` to distinguish selection (`send`, retained for adapter compatibility) from preview. Returning photo, video or document media stages it in the composer; returning null cancels without selecting it. Voice recordings also become pending attachments after recording stops. With `ExpoMessagingScreen`, supply `resolveAttachmentChoice(id, signal)` to return an authorized cache copy; the standard preview, validation, send and cleanup flow handles the rest. Keep originals in the user's library untouched. The host controls library access and which recent items it supplies.
+
+Camera capture and library selection are separate controls. `appearance.showPhotoLibrary` and `showVideoLibrary` hide library choices without removing the corresponding message-type permission needed for camera captures. Both default to true for existing integrations. The builder manages these together with Camera, so enabling capture does not select Photos/Videos or insert example media. Parent and network message-type permissions remain enforced.
+
+The Expo adapter keeps selected and recorded attachments locally until Send. Recording stops into a playable draft without uploading. Send immediately queues the bubbles, then uploads the selected files. A caption belongs to the final attachment; a quote belongs to the first. The batch preserves selection order when uploads finish out of order. Custom adapters can supply components.VoiceAttachment for draft playback and releaseAttachment for local cleanup.
+
+
+## Group conversations, reactions and polls
+
+The same `MessagingScreen` opens direct or group conversations. Supply `participants: {[userId]: {name, avatarUrl}}` from your own authorized profile data. The service supplies the group name, membership and `canSend`; read-only members see the conversation without a composer. Your backend manages group membership through `RobonoMessagingBackend.setGroup`, never a mobile API key.
+
+Enable reactions and polls in Experience builder. The screen includes the long-press reaction picker, reaction counts, poll composer and voting/results controls. These components share your configured message colors. `PollMessage` and `PollComposer` can also be used separately. Voting is visible to other participants; only a poll's creator can close it.
+
+## Optional message after no answer
+
+Use `ExpoMessagingCallingScreen` from `@robono/messaging-react-native/expo-calling` for the supplied native media tools together with calling. It accepts the same `storage` and `audioSession` as `ExpoMessagingScreen`. For your own media adapter, use `MessagingCallingScreen` from the `/calling` entry to combine the optional call button and message composer. Connect the calling controller's `onUnansweredCall` callback to your existing conversation navigation, then pass `unansweredCallId` and `onDismissCallMessage`. The callback only runs for an outgoing call made in the current controller session that ended without an answer; opening old missed-call history does not trigger it.
+
+`UnansweredCallMessage` is also exported separately for a custom composer. Place it inside `MessagingProvider` and supply your existing `pickAttachment` adapter. The adapter must support recording, review and private upload. Eligibility comes from your authenticated backend, and sending rechecks permissions. Recording is optional and starts only when the caller chooses it. An ordinary message is left in the chat, with normal history, retry and media rules.
+
+### Blocking, reporting, reactions and language tools
+
+The default header’s three-dot menu provides Block/Unblock and Report when the authenticated backend advertises safety support. Hold a received bubble to report that message. `onContactOptions` optionally replaces the supplied contact menu with your existing safety flow. The exported `MessagingSafety` component can also be composed into your screen.
+
+Blocking retains history and stops direct messages and calls for that pair in your app. Shared group messages remain visible. Reporting is separate: it shares the selected message, or up to five recent incoming messages, and the reason with your app’s moderators. It confirms success only after storage acknowledges the report. The SDK reuses the request ID on retry. Owners and administrators review reports in the Messaging workspace; private media is reviewed through your app’s authorized storage tools.
+
+Enable Reactions to show an emoji ribbon beside the long-pressed bubble, or the hover smile icon on desktop. Selected reactions stay attached below the message. Polls are interactive chat messages created from the attachment menu. Transcript shows readable text under a voice message. Translate opens the shared compact popup with **Translate to text** and **Translate to voice**. Both text and voice messages support either output. The Expo screen supplies the spoken-result player and uses the normal audio session, so recordings and other playback do not overlap. The original message and timestamp stay in place. Provide `language` for the viewer’s target language and connect `MessagingClient.transformRequest` to the authenticated `createMessagingTransformBackendAdapter` on your server.
+
+### November 1 behavior update (unpublished)
+
+The default palette follows Messenger. Existing saved customer colors remain in
+place. Direct chats use the brand header; groups use Messenger’s blue header.
+Bubble padding is fixed; the legacy `compact` property is accepted for backwards
+compatibility but no longer changes core spacing.
+
+Photo/video/file selections remain removable drafts; tapping a draft opens its
+viewer without deleting the selection. Expo supplies small image/video previews
+using `expo-image-manipulator` and `expo-video-thumbnails`; add those optional peers
+when using the Expo entry. Copy uses `expo-clipboard`. Native media downloads use
+photo-library permission; sharing uses the platform share sheet. New managed photo/video uploads have an authenticated preview (at most 480 pixels and 128 KiB) after the updated storage worker, inspector, media handler and migration 178 are deployed. Previews count toward normal storage/transfer usage. Older large uploads without a preview remain tap-to-open; originals over 2 MiB are never automatically downloaded to build thumbnails.
+
+`appearance.showWaveform` controls display only. Verified waveform samples stay
+in `media.waveform`. The playback track remains seekable when the waveform is
+hidden. Managed storage computes waveform data independently of this preference.
+
+Groups offer polls; direct chats offer a recipient-only Yes/No question whose
+first answer is final. Both use centered popups on all platforms. Deploy migration
+`20261101017400_messaging_captions_questions.sql` and the updated messaging handler
+before releasing these SDK changes. Deploy the updated media inspector before the
+updated managed-media handler. These source changes have not been published.
+
+### Optional downloads in the viewer
+
+Select **Download button** in the website's **Features & preview → Appearance**, or
+set `appearance.showDownloadButton: true`. The Expo viewer shows the same Download
+action for photos, videos and files; it stays hidden by default. Photos and videos
+save to the device photo library after the user grants permission. On iPhone,
+documents open the native sheet with Save to Files. On Android, the user chooses a
+folder and the document is copied there in bounded chunks. Cancelling creates no
+file, and a failed copy removes its own partial output. Use `expo-file-system`
+55.0.5 or later for Android document saving. Originals remain in private storage.
+This setting controls the visible action, not the authorization needed to view media.
+
+`createExpoMessagingClient` keeps outgoing text, selected attachments and failed
+sends in your app's private document storage, separated by endpoint and user.
+`ExpoMessagingScreen` restores small previews and reuses the original upload/send
+identity when retrying. Call `client.signOut()` on logout to remove that user's
+saved work. `dispose()` preserves unfinished work for reopening. Use
+`persistence: false` to disable storage. No received history or download links are
+persisted by this store. The OS app sandbox protects these files; this is not an
+additional application encryption layer.
+
+The shared message menu and media preview include Forward and sender Delete.
+Forward checks both chats and uploads a separate private attachment copy; retrying
+uses the same send ID. Edits can replace/remove attachments before a recipient
+opens them. Removing the only attachment requires text. Caption edits keep the
+original file. The ordinary composer draft is retained throughout editing.
+
+`MessagingInbox` offers Mute/Unmute and Delete chat on long press (right-click on
+web), plus accessibility actions. Deletion clears only that user's view, up to the
+message shown when confirmation opened. New messages bring the chat back. When
+composing your own native navigation, pass
+`onDeleted={id => messagingClient.forgetConversation(id)}` to clear its local work.
+Updated backend support is required; old adapters hide these controls.
+
+### Saved and multiple-message actions
+
+Long press a message, then choose Select to select more rows. The compact action bar supports chronological forwarding and deletion of eligible unread outgoing messages. A single selection also supports Copy, Save and Edit. Back clears the selection.
+
+`createExpoMessagingClient` also supplies Saved: explicit local text and attachment copies in the app-private directory, separated by endpoint, account and namespace. The shared header opens Saved. Saving rechecks message access before and after making the copy, and marks incoming content consumed. Saved copies are independent of network retention; they never reuse signed URLs. `client.signOut()` deletes this account’s saved copies. Disabling persistence also disables Saved. Device storage is not a cloud backup or an additional app encryption layer. For a custom engine, supply a `MessagingSavedStore` to `MessagingClient` and `openSavedAttachment` to the shared screen.
+
+### Social previews
+
+Install `react-native-webview` with the Expo peer dependencies and rebuild the native app. `ExpoMessagingScreen` supplies the player and the standard shared popup; a custom engine can supply `components.SocialPlayer`. The updated server adapter and hosted messaging endpoint advertise support. Recognized links gain a small play action, while tapping the link still opens the original app/site. Players are loaded only after an explicit tap and fresh message authorization, require explicit playback, and are removed on close/background/navigation. Opening a player stops the current voice-message player and uses the supplied audio-session coordinator. No application cookies or local-file access are shared with the embedded page. Some providers/private posts cannot be embedded; the popup keeps an Open-original link.
+
+The same provider parser is used by Messenger, the browser and the backend, including Snapchat and Rumble. Preview opens contribute to the per-network `social.opened` metric. This source change still requires coordinated endpoint and package deployment; installing a newer UI against an older adapter does not enable unsupported controls.