stream-chat 9.51.0 → 9.52.1

package/dist/cjs/index.browser.js

@@ -189,6 +189,7 @@ __export(index_exports, {
   createMessageComposerStateCompositionMiddleware: () => createMessageComposerStateCompositionMiddleware,
   createPollComposerStateMiddleware: () => createPollComposerStateMiddleware,
   createPostUploadAttachmentEnrichmentMiddleware: () => createPostUploadAttachmentEnrichmentMiddleware,
+  createSendWithPendingUploadsAttachmentsMiddleware: () => createSendWithPendingUploadsAttachmentsMiddleware,
   createSharedLocationCompositionMiddleware: () => createSharedLocationCompositionMiddleware,
   createTextComposerCompositionMiddleware: () => createTextComposerCompositionMiddleware,
   createTextComposerPreValidationMiddleware: () => createTextComposerPreValidationMiddleware,
@@ -217,6 +218,7 @@ __export(index_exports, {
   getTokenizedSuggestionDisplayName: () => getTokenizedSuggestionDisplayName,
   getTriggerCharWithToken: () => getTriggerCharWithToken,
   gunzipPayload: () => gunzipPayload,
+  hasPending: () => hasPending,
   insertItemWithTrigger: () => insertItemWithTrigger,
   isAudioAttachment: () => isAudioAttachment,
   isBlobButNotFile: () => isBlobButNotFile,
@@ -224,6 +226,7 @@ __export(index_exports, {
   isFileAttachment: () => isFileAttachment,
   isFileList: () => isFileList,
   isFileReference: () => isFileReference,
+  isFinishedUpload: () => isFinishedUpload,
   isGiphyAttachment: () => isGiphyAttachment,
   isImageAttachment: () => isImageAttachment,
   isImageFile: () => isImageFile,
@@ -236,9 +239,11 @@ __export(index_exports, {
   isLocalVoiceRecordingAttachment: () => isLocalVoiceRecordingAttachment,
   isOwnUser: () => isOwnUser,
   isPatch: () => isPatch,
+  isPendingUpload: () => isPendingUpload,
   isScrapedContent: () => isScrapedContent,
   isSharedLocationResponse: () => isSharedLocationResponse,
   isTargetedOptionTextUpdate: () => isTargetedOptionTextUpdate,
+  isUploadCancellation: () => isUploadCancellation,
   isUploadedAttachment: () => isUploadedAttachment,
   isVideoAttachment: () => isVideoAttachment,
   isVoiceRecordingAttachment: () => isVoiceRecordingAttachment,
@@ -258,12 +263,15 @@ __export(index_exports, {
   readFileAsArrayBuffer: () => readFileAsArrayBuffer,
   removeDiacritics: () => removeDiacritics,
   replaceWordWithEntity: () => replaceWordWithEntity,
+  settled: () => settled,
   stripCommandFromText: () => stripCommandFromText,
   stripMentionTokens: () => stripMentionTokens,
   textIsEmpty: () => textIsEmpty,
   timeLeftMs: () => timeLeftMs,
   verifyAndParseWebhook: () => verifyAndParseWebhook,
-  verifySignature: () => verifySignature
+  verifySignature: () => verifySignature,
+  withCancellation: () => withCancellation,
+  withoutConcurrency: () => withoutConcurrency
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -530,7 +538,7 @@ var ChannelBatchUpdater = class {
 };
 
 // src/client.ts
-var import_axios3 = __toESM(require("axios"));
+var import_axios4 = __toESM(require("axios"));
 var import_https = __toESM(require_https());
 
 // src/utils.ts
@@ -579,6 +587,22 @@ function logChatPromiseExecution(promise, name) {
     console.warn(`failed to do ${name}, ran into error: `, error);
   });
 }
+var noopLogger = () => null;
+var logError = (logger, error, event) => {
+  const message = "Unhandled error in event listener";
+  logger("error", message, { error, event });
+  if (logger === noopLogger) console.error(message, error, event);
+};
+var invokeEventListener = (listener, event, logger) => {
+  try {
+    const result = listener(event);
+    if (result && typeof result.then === "function") {
+      Promise.resolve(result).catch((error) => logError(logger, error, event));
+    }
+  } catch (error) {
+    logError(logger, error, event);
+  }
+};
 var sleep = (m) => new Promise((r) => setTimeout(r, m));
 function isFunction(value) {
   return typeof value === "function" || value instanceof Function || Object.prototype.toString.call(value) === "[object Function]";
@@ -626,7 +650,6 @@ var channelHasReadEvents = (channel) => {
   return !(Array.isArray(ownCapabilities) && !ownCapabilities.includes("read-events"));
 };
 var channelTracksReadLocally = (channel) => !channelHasReadEvents(channel) && !!channel?.getClient().options.isLocalUnreadCountEnabled;
-var userHasReadReceipts = (client) => client.user?.privacy_settings?.read_receipts?.enabled ?? true;
 function addFileToFormData(uri, name, contentType) {
   const data = new import_form_data.default();
   if (isReadableStream(uri) || isBuffer(uri) || isFileWebAPI(uri) || isBlobWebAPI(uri)) {
@@ -790,6 +813,38 @@ function unformatMessage(message) {
     quoted_message: toMessageResponseBase(message.quoted_message)
   };
 }
+var isRemoteUrl = (url) => !!url && /^https?:\/\//i.test(url.trim());
+var sanitizeOutgoingAttachments = ({
+  client,
+  message
+}) => {
+  const attachments = message.attachments;
+  if (!attachments?.length) return message;
+  const unresolved = [];
+  let changed = false;
+  const sanitized = attachments.reduce((acc, attachment) => {
+    const { localMetadata, ...rest } = attachment;
+    if (!localMetadata) {
+      acc.push(attachment);
+      return acc;
+    }
+    changed = true;
+    const hasRemoteSource = isRemoteUrl(rest.asset_url) || isRemoteUrl(rest.image_url) || isRemoteUrl(rest.og_scrape_url) || isRemoteUrl(rest.title_link);
+    if (hasRemoteSource) {
+      acc.push(rest);
+    } else {
+      unresolved.push(rest);
+    }
+    return acc;
+  }, []);
+  if (unresolved.length) {
+    const text = `Dropped ${unresolved.length} attachment(s) whose upload never completed. Composing with pending uploads requires awaiting them before sending.`;
+    const extraData = { attachments: unresolved, message, tags: ["attachments"] };
+    client.logger("warn", text, extraData);
+    console.warn(text, extraData);
+  }
+  return changed ? { ...message, attachments: sanitized } : message;
+};
 var localMessageToNewMessagePayload = (localMessage) => {
   const {
     // Remove all timestamp fields and client-specific fields.
@@ -2562,6 +2617,12 @@ var CooldownTimer = class extends WithSubscriptions {
 var isScrapedContent = (attachment) => !!attachment?.og_scrape_url || !!attachment?.title_link;
 var isLocalAttachment = (attachment) => !!attachment?.localMetadata?.id;
 var isLocalUploadAttachment = (attachment) => !!attachment?.localMetadata?.uploadState;
+var PENDING_UPLOAD_STATES = [
+  "pending",
+  "uploading"
+];
+var isPendingUpload = (attachment) => isLocalUploadAttachment(attachment) && PENDING_UPLOAD_STATES.includes(attachment.localMetadata.uploadState);
+var isFinishedUpload = (attachment) => isLocalUploadAttachment(attachment) && attachment.localMetadata.uploadState === "finished";
 var isFileAttachment = (attachment, supportedVideoFormat = []) => attachment.type === "file" || !!(attachment.mime_type && supportedVideoFormat.indexOf(attachment.mime_type) === -1 && attachment.type !== "video");
 var isLocalFileAttachment = (attachment) => isFileAttachment(attachment) && isLocalAttachment(attachment);
 var isImageAttachment = (attachment) => attachment.type === "image" && !isScrapedContent(attachment);
@@ -2637,7 +2698,7 @@ var ensureIsLocalAttachment = (attachment) => {
 };
 
 // src/messageComposer/middleware/attachmentManager/postUpload/attachmentEnrichment.ts
-var createPostUploadAttachmentEnrichmentMiddleware = () => ({
+var createPostUploadAttachmentEnrichmentMiddleware = (composer) => ({
   id: "stream-io/attachment-manager-middleware/post-upload-enrichment",
   handlers: {
     postProcess: ({
@@ -2650,9 +2711,10 @@ var createPostUploadAttachmentEnrichmentMiddleware = () => ({
       if (error) return forward();
       if (!attachment || !response) return discard();
       const enrichedAttachment = { ...attachment };
-      const previewUri = attachment.localMetadata.previewUri;
-      if (previewUri) {
-        if (previewUri.startsWith("blob:")) URL.revokeObjectURL(previewUri);
+      const { id, previewUri } = attachment.localMetadata;
+      const attachmentIsStillInComposer = !composer || !!composer.attachmentManager.attachmentsById[id];
+      if (previewUri && attachmentIsStillInComposer) {
+        if (previewUri.startsWith("blob:")) URL.revokeObjectURL?.(previewUri);
         delete enrichedAttachment.localMetadata.previewUri;
       }
       if (isLocalImageAttachment(attachment)) {
@@ -2675,6 +2737,12 @@ var createPostUploadAttachmentEnrichmentMiddleware = () => ({
 var withoutConcurrency = createRunner(wrapWithContinuationTracking);
 var withCancellation = createRunner(wrapWithCancellation);
 var pendingPromises = /* @__PURE__ */ new Map();
+function hasPending(tag) {
+  return pendingPromises.has(tag);
+}
+async function settled(tag) {
+  await pendingPromises.get(tag)?.promise;
+}
 function createRunner(wrapper) {
   return function run(tag, cb) {
     const { cb: wrapped, onContinued } = wrapper(tag, cb);
@@ -2717,6 +2785,16 @@ var MiddlewareExecutor = class {
     this.middleware = [];
     this.id = generateUUIDv4();
   }
+  /**
+   * The middleware currently installed, in execution order.
+   *
+   * Read-only: use `use` / `insert` / `replace` / `setOrder` / `remove` to change the chain. It
+   * exists so components can ask what the chain is capable of - a middleware may declare
+   * behaviour its host has to account for, and the host has no other way to find out.
+   */
+  get installedMiddleware() {
+    return this.middleware;
+  }
   use(middleware) {
     this.middleware = this.middleware.concat(middleware);
     return this;
@@ -2820,6 +2898,142 @@ var MiddlewareExecutor = class {
   }
 };
 
+// src/uploadManager.ts
+var import_axios = __toESM(require("axios"));
+var isUploadCancellation = (error) => import_axios.default.isCancel(error) || error instanceof Error && error.name === "AbortError";
+var initState = () => ({ uploads: {} });
+var upsertById = (uploads, record) => ({
+  ...uploads,
+  [record.id]: { ...uploads[record.id], ...record }
+});
+var updateById = (uploads, record) => {
+  if (!(record.id in uploads)) return null;
+  const current = uploads[record.id];
+  return { ...uploads, [record.id]: { ...current, ...record } };
+};
+var UploadManager = class {
+  constructor(client) {
+    this.client = client;
+    this.inFlightUploads = /* @__PURE__ */ new Map();
+    this.getUpload = (id) => this.uploads[id];
+    /**
+     * Clears all upload records.
+     * Invoked when the user disconnects so a later session does not inherit stale upload state.
+     * Aborts every in-flight upload request via its `UploadRequestOptions.abortSignal`.
+     */
+    this.reset = () => {
+      for (const { abortController } of this.inFlightUploads.values()) {
+        abortController.abort();
+      }
+      this.inFlightUploads.clear();
+      this.state.next(initState());
+    };
+    /**
+     * Removes the upload record for `id` if present.
+     * If an upload is still in progress, aborts its `UploadRequestOptions.abortSignal`.
+     */
+    this.deleteUploadRecord = (id) => {
+      const flight = this.inFlightUploads.get(id);
+      if (flight) {
+        this.inFlightUploads.delete(id);
+        flight.abortController.abort();
+      }
+      this.state.next((current) => {
+        if (!(id in current.uploads)) return current;
+        const uploads = { ...current.uploads };
+        delete uploads[id];
+        return { ...current, uploads };
+      });
+    };
+    /**
+     * Starts an upload for `id`, or returns the existing in-flight promise if one is already running.
+     * Uses {@link StreamChat.channel}(`channelCid`) → `messageComposer.attachmentManager.doUploadRequest`.
+     * Resolves with that result; rejects if the upload rejects (the record is removed from state either way).
+     */
+    this.upload = ({
+      id,
+      channelCid,
+      file
+    }) => {
+      const existing = this.inFlightUploads.get(id);
+      if (existing) return existing.promise;
+      let resolvePromise;
+      let rejectPromise;
+      const promise = new Promise((resolve, reject) => {
+        resolvePromise = resolve;
+        rejectPromise = reject;
+      });
+      const abortController = new AbortController();
+      this.inFlightUploads.set(id, { promise, abortController });
+      void (async () => {
+        const attachmentManager = this.resolveAttachmentManager(channelCid);
+        const trackProgress = attachmentManager.config.trackUploadProgress;
+        try {
+          this.upsertUpload({
+            uploadConfirmationPending: false,
+            id,
+            uploadProgress: trackProgress ? 0 : void 0
+          });
+          const onProgress = trackProgress ? (progress) => {
+            this.updateUpload({
+              id,
+              uploadProgress: progress,
+              // Only a number says anything about the flush, so a report without one leaves
+              // the flag alone: `undefined` means the transport cannot measure this upload,
+              // not that bytes were un-sent. Lowering it there would drop a UI that had
+              // already gone indeterminate back to a determinate one with nothing to show.
+              //
+              // The record is removed in the `finally` below, so a record that still exists
+              // while reporting 100% can only mean "flushed, awaiting the response".
+              ...typeof progress === "number" ? { uploadConfirmationPending: progress >= 100 } : {}
+            });
+          } : void 0;
+          const uploadRequestOptions = {
+            abortSignal: abortController.signal,
+            ...onProgress ? { onProgress } : {}
+          };
+          const response = await attachmentManager.doUploadRequest(
+            file,
+            uploadRequestOptions
+          );
+          resolvePromise(response);
+        } catch (error) {
+          rejectPromise(error);
+        } finally {
+          this.inFlightUploads.delete(id);
+          this.deleteUploadRecord(id);
+        }
+      })();
+      return promise;
+    };
+    this.upsertUpload = (record) => {
+      this.state.partialNext({
+        uploads: upsertById(this.uploads, record)
+      });
+    };
+    this.updateUpload = (record) => {
+      this.state.next((current) => {
+        const nextUploads = updateById(current.uploads, record);
+        if (!nextUploads) return current;
+        return { ...current, uploads: nextUploads };
+      });
+    };
+    this.state = new StateStore(initState());
+  }
+  resolveAttachmentManager(channelCid) {
+    const colon = channelCid.indexOf(":");
+    if (colon <= 0 || colon === channelCid.length - 1) {
+      throw new Error(`Invalid channelCid: ${channelCid}`);
+    }
+    const channelType = channelCid.slice(0, colon);
+    const channelId = channelCid.slice(colon + 1);
+    return this.client.channel(channelType, channelId).messageComposer.attachmentManager;
+  }
+  get uploads() {
+    return this.state.getLatestValue().uploads;
+  }
+};
+
 // src/messageComposer/middleware/attachmentManager/postUpload/uploadErrorHandler.ts
 var createUploadErrorHandlerMiddleware = (composer) => ({
   id: "stream-io/attachment-manager-middleware/upload-error",
@@ -2832,6 +3046,7 @@ var createUploadErrorHandlerMiddleware = (composer) => ({
       const { attachment, error } = state;
       if (!error) return forward();
       if (!attachment) return discard();
+      if (isUploadCancellation(error)) return forward();
       const reason = error instanceof Error ? error.message : "unknown error";
       composer.client.notifications.addError({
         message: "Error uploading attachment",
@@ -2856,7 +3071,7 @@ var AttachmentPostUploadMiddlewareExecutor = class extends MiddlewareExecutor {
     super();
     this.use([
       createUploadErrorHandlerMiddleware(composer),
-      createPostUploadAttachmentEnrichmentMiddleware()
+      createPostUploadAttachmentEnrichmentMiddleware(composer)
     ]);
   }
 };
@@ -3304,7 +3519,7 @@ function mergeWithDiff(target, source, customizer) {
 }
 
 // src/messageComposer/attachmentManager.ts
-var initState = ({
+var initState2 = ({
   message
 }) => ({
   attachments: (message?.attachments ?? [])?.filter(({ og_scrape_url }) => !og_scrape_url).map((att) => {
@@ -3332,13 +3547,14 @@ var _AttachmentManager = class _AttachmentManager {
         ...attachment,
         localMetadata: {
           ...attachment.localMetadata,
+          uploadConfirmationPending: false,
           uploadProgress: void 0,
           uploadState: "failed"
         }
       };
     };
     this.initState = ({ message } = {}) => {
-      this.state.next(initState({ message }));
+      this.state.next(initState2({ message }));
     };
     this.getSnapshot = () => {
       const state = this.state.getLatestValue();
@@ -3415,8 +3631,22 @@ var _AttachmentManager = class _AttachmentManager {
         this.state.partialNext({ attachments });
       }
     };
+    /**
+     * Releases a local preview URL the SDK minted, if it minted one.
+     *
+     * Only `blob:` URLs are ours to revoke: `toLocalUploadAttachment` puts a
+     * `URL.createObjectURL` result in `previewUri` for a `File`, but for a React Native
+     * `FileReference` it stores the caller's own native file URI, which must be left alone.
+     */
+    this.revokePreviewUri = (attachment) => {
+      const previewUri = attachment.localMetadata?.previewUri;
+      if (previewUri?.startsWith("blob:")) URL.revokeObjectURL?.(previewUri);
+    };
     this.removeAttachments = (localAttachmentIds) => {
       if (!localAttachmentIds.length) return;
+      const removedAttachments = this.attachments.filter(
+        (attachment) => localAttachmentIds.includes(attachment.localMetadata?.id)
+      );
       this.state.partialNext({
         attachments: this.attachments.filter(
           (attachment) => !localAttachmentIds.includes(attachment.localMetadata?.id)
@@ -3425,6 +3655,7 @@ var _AttachmentManager = class _AttachmentManager {
       for (const id of localAttachmentIds) {
         this.client.uploadManager.deleteUploadRecord(id);
       }
+      removedAttachments.forEach(this.revokePreviewUri);
     };
     this.getUploadConfigCheck = async (fileLike) => {
       const client = this.channel.getClient();
@@ -3576,21 +3807,27 @@ var _AttachmentManager = class _AttachmentManager {
           localMetadata: {
             ...attachment.localMetadata,
             uploadState: "failed",
-            uploadProgress: void 0
+            uploadProgress: void 0,
+            // `false`, not `undefined`: these updates go through `updateAttachment`, which merges
+            // via `mergeWith` — and that skips `undefined` source values, so `undefined` would
+            // leave a stale `true` in place.
+            uploadConfirmationPending: false
           }
         };
-        this.client.notifications.addError({
-          message: "Error uploading attachment",
-          origin: {
-            emitter: "AttachmentManager",
-            context: { attachment, failedAttachment }
-          },
-          options: {
-            type: "api:attachment:upload:failed",
-            metadata: { reason },
-            originalError: error instanceof Error ? error : void 0
-          }
-        });
+        if (!isUploadCancellation(error)) {
+          this.client.notifications.addError({
+            message: "Error uploading attachment",
+            origin: {
+              emitter: "AttachmentManager",
+              context: { attachment, failedAttachment }
+            },
+            options: {
+              type: "api:attachment:upload:failed",
+              metadata: { reason },
+              originalError: error instanceof Error ? error : void 0
+            }
+          });
+        }
         this.updateAttachment(failedAttachment);
         return failedAttachment;
       }
@@ -3603,7 +3840,9 @@ var _AttachmentManager = class _AttachmentManager {
         localMetadata: {
           ...attachment.localMetadata,
           uploadState: "finished",
-          uploadProgress: void 0
+          uploadProgress: void 0,
+          // See the note in the failure branch: `undefined` cannot clear through `mergeWith`.
+          uploadConfirmationPending: false
         }
       };
       const previewUri = uploadedAttachment.localMetadata.previewUri;
@@ -3652,7 +3891,9 @@ var _AttachmentManager = class _AttachmentManager {
             localMetadata: {
               ...attachment.localMetadata,
               uploadState: error ? "failed" : "finished",
-              uploadProgress: void 0
+              uploadProgress: void 0,
+              // See the note in `uploadAttachment`: `undefined` cannot clear through `mergeWith`.
+              uploadConfirmationPending: false
             }
           },
           error,
@@ -3677,7 +3918,7 @@ var _AttachmentManager = class _AttachmentManager {
       );
     };
     this.composer = composer;
-    this.state = new StateStore(initState({ message }));
+    this.state = new StateStore(initState2({ message }));
     this.attachmentsByIdGetterCache = { attachmentsById: {}, attachments: [] };
     this.preUploadMiddlewareExecutor = new AttachmentPreUploadMiddlewareExecutor({
       composer
@@ -3782,7 +4023,8 @@ var _AttachmentManager = class _AttachmentManager {
         localMetadata: {
           ...attachment.localMetadata,
           uploadState: "uploading",
-          uploadProgress: this.config.trackUploadProgress ? 0 : void 0
+          uploadProgress: this.config.trackUploadProgress ? 0 : void 0,
+          uploadConfirmationPending: false
         }
       }
     ]);
@@ -3795,7 +4037,8 @@ var _AttachmentManager = class _AttachmentManager {
           localMetadata: {
             ...attachment.localMetadata,
             uploadState: "uploading",
-            uploadProgress: nextUpload.uploadProgress
+            uploadProgress: nextUpload.uploadProgress,
+            uploadConfirmationPending: nextUpload.uploadConfirmationPending
           }
         });
       }
@@ -3849,6 +4092,50 @@ var localAttachmentToAttachment = (localAttachment) => {
   const { localMetadata, ...attachment } = localAttachment;
   return attachment;
 };
+var composeWithPendingUploads = ({
+  composer,
+  state
+}) => {
+  const composerIsKeptAsDraft = !!composer.pollId;
+  const relevantAttachments = composer.attachmentManager.attachments.filter(
+    (attachment) => isFinishedUpload(attachment) || !composerIsKeptAsDraft && isPendingUpload(attachment)
+  );
+  const localAttachments = (state.localMessage.attachments ?? []).concat(
+    relevantAttachments.map(
+      (attachment) => isPendingUpload(attachment) ? attachment : localAttachmentToAttachment(attachment)
+    )
+  );
+  const messageAttachments = (state.message.attachments ?? []).concat(
+    relevantAttachments.filter(isFinishedUpload).map(localAttachmentToAttachment)
+  );
+  if (!localAttachments.length && !messageAttachments.length) return state;
+  return {
+    ...state,
+    localMessage: localAttachments.length ? {
+      ...state.localMessage,
+      attachments: localAttachments
+    } : state.localMessage,
+    message: messageAttachments.length ? {
+      ...state.message,
+      attachments: messageAttachments
+    } : state.message
+  };
+};
+var createSendWithPendingUploadsAttachmentsMiddleware = (composer) => ({
+  allowsPendingUploads: true,
+  id: "stream-io/message-composer-middleware/attachments",
+  handlers: {
+    compose: ({
+      state,
+      next,
+      forward
+    }) => {
+      const { attachmentManager } = composer;
+      if (!attachmentManager) return forward();
+      return next(composeWithPendingUploads({ composer, state }));
+    }
+  }
+});
 var createAttachmentsCompositionMiddleware = (composer) => ({
   id: "stream-io/message-composer-middleware/attachments",
   handlers: {
@@ -4065,7 +4352,7 @@ var getInitialMentions = (message) => {
 };
 var isSameMentionEntity = (first, second) => first.id === second.id && first.mentionType === second.mentionType;
 var getMentionsFromState = (state) => state.mentions ?? state.mentionedUsers.map(userResponseToMentionEntity);
-var initState2 = ({
+var initState3 = ({
   composer,
   message
 }) => {
@@ -4094,7 +4381,7 @@ var initState2 = ({
 var TextComposer = class {
   constructor({ composer, message }) {
     this.initState = ({ message } = {}) => {
-      this.state.next(initState2({ composer: this.composer, message }));
+      this.state.next(initState3({ composer: this.composer, message }));
     };
     this.getSnapshot = (state = this.state.getLatestValue()) => state;
     this.restoreSnapshot = (snapshot) => {
@@ -4287,7 +4574,7 @@ var TextComposer = class {
       this.commitState(output.state);
     };
     this.composer = composer;
-    this.state = new StateStore(initState2({ composer, message }));
+    this.state = new StateStore(initState3({ composer, message }));
     this.middlewareExecutor = new TextComposerMiddlewareExecutor({ composer });
   }
   get channel() {
@@ -5989,6 +6276,13 @@ var MessageComposerMiddlewareExecutor = class extends MiddlewareExecutor {
       createCompositionDataCleanupMiddleware(composer)
     ]);
   }
+  /**
+   * Narrows the base accessor to the composition middleware type, so callers can read the
+   * declarations it carries (`allowsPendingUploads`) without casting.
+   */
+  get installedMiddleware() {
+    return super.installedMiddleware;
+  }
 };
 var MessageDraftComposerMiddlewareExecutor = class extends MiddlewareExecutor {
   constructor({ composer }) {
@@ -7103,7 +7397,7 @@ var DEFAULT_COMPOSER_CONFIG = {
 };
 
 // src/messageComposer/CustomDataManager.ts
-var initState3 = (options) => {
+var initState4 = (options) => {
   if (!options)
     return { message: {}, custom: {} };
   return { message: {}, custom: {} };
@@ -7112,14 +7406,14 @@ var CustomDataManager = class {
   constructor({ composer, message }) {
     this.isMessageDataEqual = (nextState, previousState) => JSON.stringify(nextState.message) === JSON.stringify(previousState?.message);
     this.initState = ({ message } = {}) => {
-      this.state.next(initState3({ composer: this.composer, message }));
+      this.state.next(initState4({ composer: this.composer, message }));
     };
     this.getSnapshot = () => this.state.getLatestValue();
     this.restoreSnapshot = (snapshot) => {
       this.state.next(snapshot);
     };
     this.composer = composer;
-    this.state = new StateStore(initState3({ composer, message }));
+    this.state = new StateStore(initState4({ composer, message }));
   }
   get customMessageData() {
     return this.state.getLatestValue().message;
@@ -7155,7 +7449,7 @@ var LinkPreviewStatus = /* @__PURE__ */ ((LinkPreviewStatus2) => {
   return LinkPreviewStatus2;
 })(LinkPreviewStatus || {});
 var linkPreviewArrayToMap = (linkPreviews) => new Map(linkPreviews.map((linkPreview) => [linkPreview.og_scrape_url, linkPreview]));
-var initState4 = ({
+var initState5 = ({
   message
 }) => message ? {
   previews: message.attachments?.reduce((acc, attachment) => {
@@ -7174,7 +7468,7 @@ var _LinkPreviewsManager = class _LinkPreviewsManager {
     this.shouldDiscardEnrichQueries = false;
     this.initState = ({ message } = {}) => {
       this.cancelURLEnrichment();
-      this.state.next(initState4({ message: this.enabled ? message : void 0 }));
+      this.state.next(initState5({ message: this.enabled ? message : void 0 }));
     };
     this.getSnapshot = () => this.state.getLatestValue();
     this.restoreSnapshot = (snapshot) => {
@@ -7277,7 +7571,7 @@ var _LinkPreviewsManager = class _LinkPreviewsManager {
     };
     this.composer = composer;
     this.state = new StateStore(
-      initState4({ message: this.enabled ? message : void 0 })
+      initState5({ message: this.enabled ? message : void 0 })
     );
     this.findAndEnrichUrls = debounce(
       this._findAndEnrichUrls.bind(this),
@@ -7365,7 +7659,7 @@ var LinkPreviewsManager = _LinkPreviewsManager;
 
 // src/messageComposer/LocationComposer.ts
 var MIN_LIVE_LOCATION_SHARE_DURATION = 60 * 1e3;
-var initState5 = ({
+var initState6 = ({
   message
 }) => ({
   location: message?.shared_location ?? null
@@ -7373,7 +7667,7 @@ var initState5 = ({
 var LocationComposer = class {
   constructor({ composer, message }) {
     this.initState = ({ message } = {}) => {
-      this.state.next(initState5({ message }));
+      this.state.next(initState6({ message }));
     };
     this.getSnapshot = () => this.state.getLatestValue();
     this.restoreSnapshot = (snapshot) => {
@@ -7391,7 +7685,7 @@ var LocationComposer = class {
       });
     };
     this.composer = composer;
-    this.state = new StateStore(initState5({ message }));
+    this.state = new StateStore(initState6({ message }));
     this._deviceId = this.config.getDeviceId();
   }
   get config() {
@@ -8112,7 +8406,7 @@ var initEditingAuditState = (composition) => {
     }
   };
 };
-var initState6 = (composition) => {
+var initState7 = (composition) => {
   if (!composition) {
     return {
       draftId: null,
@@ -8199,7 +8493,7 @@ var _MessageComposer = class _MessageComposer extends WithSubscriptions {
       this.textComposer.initState({ message });
       this.pollComposer.initState();
       this.customDataManager.initState({ message });
-      this.state.next(initState6(composition));
+      this.state.next(initState7(composition));
     };
     this.initStateFromChannelResponse = (channelApiResponse) => {
       if (this.channel.cid !== channelApiResponse.channel.cid) {
@@ -8665,7 +8959,7 @@ var _MessageComposer = class _MessageComposer extends WithSubscriptions {
     this.editingAuditState = new StateStore(
       this.initEditingAuditState(composition)
     );
-    this.state = new StateStore(initState6(composition));
+    this.state = new StateStore(initState7(composition));
     this.compositionMiddlewareExecutor = new MessageComposerMiddlewareExecutor({
       composer: this
     });
@@ -8744,8 +9038,32 @@ var _MessageComposer = class _MessageComposer extends WithSubscriptions {
     const currentCommand = this.textComposer.command;
     return !currentCommand || this.validateCommandSendability(currentCommand).ready;
   }
+  /**
+   * Whether the installed composition middleware composes messages whose uploads are still in
+   * flight — see `MessageCompositionMiddleware.allowsPendingUploads`.
+   *
+   * Derived from the chain rather than from config, so there is exactly one switch: the UI SDK
+   * that implements the rest of the flow installs the middleware, and everything that has to
+   * follow from that (starting with {@link hasSendableData}) follows on its own.
+   *
+   * **Temporary API.** In v10 sending with pending uploads becomes part of the composer
+   * configuration (`MessageComposerConfig`, set through `updateConfig`), and this getter,
+   * together with the middleware declaration it reads, is replaced by that config field.
+   */
+  get allowsPendingUploads() {
+    return this.compositionMiddlewareExecutor.installedMiddleware.some(
+      (middleware) => middleware.allowsPendingUploads
+    );
+  }
   get hasSendableData() {
-    return this.isCommandSendable && !!(!this.attachmentManager.uploadsInProgressCount && (!this.textComposer.textIsEmpty || this.attachmentManager.successfulUploadsCount > 0) || this.pollId || !!this.locationComposer.validLocation);
+    if (!this.isCommandSendable) return false;
+    if (this.allowsPendingUploads) {
+      const hasSendableAttachment = this.attachmentManager.attachments.some(
+        (attachment) => isFinishedUpload(attachment) || isPendingUpload(attachment)
+      );
+      return !!(!this.textComposer.textIsEmpty || hasSendableAttachment || this.pollId || this.locationComposer.validLocation);
+    }
+    return !!(!this.attachmentManager.uploadsInProgressCount && (!this.textComposer.textIsEmpty || this.attachmentManager.successfulUploadsCount > 0) || this.pollId || !!this.locationComposer.validLocation);
   }
   get compositionIsEmpty() {
     return !this.quotedMessage && this.contentIsEmpty;
@@ -8884,7 +9202,6 @@ var MessageDeliveryReporter = class _MessageDeliveryReporter {
      * @param options
      */
     this.markRead = async (collection, options) => {
-      if (!userHasReadReceipts(this.client)) return null;
       let result = null;
       if (isChannel(collection)) {
         result = await collection.markAsReadRequest(options);
@@ -8894,7 +9211,7 @@ var MessageDeliveryReporter = class _MessageDeliveryReporter {
           thread_id: collection.id
         });
       }
-      this.removeCandidateFor(collection);
+      if (result) this.removeCandidateFor(collection);
       return result;
     };
     /**
@@ -9279,18 +9596,14 @@ var Channel = class {
       return await this.query(defaultOptions, "latest");
     };
     this._callChannelListeners = (event) => {
-      const channel = this;
-      const listeners = [];
-      if (channel.listeners.all) {
-        listeners.push(...channel.listeners.all);
-      }
-      if (channel.listeners[event.type]) {
-        listeners.push(...channel.listeners[event.type]);
-      }
+      const listeners = [
+        ...this.listeners.all ?? [],
+        ...this.listeners[event.type] ?? []
+      ];
+      const { logger } = this._client;
       for (const listener of listeners) {
-        if (typeof listener !== "string") {
-          listener(event);
-        }
+        if (typeof listener === "string") continue;
+        invokeEventListener(listener, event, logger);
       }
     };
     /**
@@ -9372,14 +9685,16 @@ var Channel = class {
    *
    * @return {Promise<SendMessageAPIResponse>} The Server Response
    */
-  async _sendMessage(message, options) {
-    return await this.getClient().post(
-      this._channelURL() + "/message",
-      {
-        message,
-        ...options
-      }
-    );
+  async _sendMessage(rawMessage, options) {
+    const client = this.getClient();
+    const message = sanitizeOutgoingAttachments({
+      client,
+      message: rawMessage
+    });
+    return await client.post(this._channelURL() + "/message", {
+      message,
+      ...options
+    });
   }
   async sendMessage(message, options) {
     try {
@@ -10202,14 +10517,15 @@ var Channel = class {
     return await this.getClient().messageDeliveryReporter.markRead(this, data);
   }
   /**
-   * markReadRequest - Send the mark read event for this user, only works if the `read_events` setting is enabled
+   * markReadRequest - Send the mark read event for this user, only works if the `read_events` setting is
+   * enabled and the user holds the `read-events` capability on this channel
    *
    * @param {MarkReadOptions} data
    * @return {Promise<EventAPIResponse | null>} Description
    */
   async markAsReadRequest(data = {}) {
     this._checkInitialized();
-    if (!this.getConfig()?.read_events && !this.getClient()._isUsingServerAuth()) {
+    if (!this.getClient()._isUsingServerAuth() && (!this.getConfig()?.read_events || !channelHasReadEvents(this))) {
       return null;
     }
     return await this.getClient().post(this._channelURL() + "/read", {
@@ -10217,14 +10533,15 @@ var Channel = class {
     });
   }
   /**
-   * markUnread - Mark the channel as unread from messageID, only works if the `read_events` setting is enabled
+   * markUnread - Mark the channel as unread from messageID, only works if the `read_events` setting is
+   * enabled and the user holds the `read-events` capability on this channel
    *
    * @param {MarkUnreadOptions} data
    * @return {APIResponse} An API response
    */
   async markUnread(data) {
     this._checkInitialized();
-    if (!this.getConfig()?.read_events && !this.getClient()._isUsingServerAuth()) {
+    if (!this.getClient()._isUsingServerAuth() && (!this.getConfig()?.read_events || !channelHasReadEvents(this))) {
       return Promise.resolve(null);
     }
     return await this.getClient().post(this._channelURL() + "/unread", {
@@ -10830,6 +11147,7 @@ var Channel = class {
       // delivery-report network sync below is skipped for it.
       case "message.read_locally":
       case "message.read":
+        if (event.thread) break;
         if (event.user?.id && event.created_at) {
           const previousReadState = channelState.read[event.user.id];
           channelState.read[event.user.id] = {
@@ -11279,7 +11597,7 @@ var ClientState = class {
 var import_isomorphic_ws = __toESM(require("isomorphic-ws"));
 
 // src/insights.ts
-var import_axios = __toESM(require("axios"));
+var import_axios2 = __toESM(require("axios"));
 var InsightMetrics = class {
   constructor() {
     this.connectionStartTimestamp = null;
@@ -11292,7 +11610,7 @@ var postInsights = async (insightType, insights) => {
   const maxAttempts = 3;
   for (let i = 0; i < maxAttempts; i++) {
     try {
-      await import_axios.default.post(
+      await import_axios2.default.post(
         `https://chat-insights.getstream.io/insights/${insightType}`,
         insights
       );
@@ -11800,131 +12118,6 @@ var StableWSConnection = class {
   }
 };
 
-// src/uploadManager.ts
-var initState7 = () => ({ uploads: {} });
-var upsertById = (uploads, record) => ({
-  ...uploads,
-  [record.id]: { ...uploads[record.id], ...record }
-});
-var updateById = (uploads, record) => {
-  if (!(record.id in uploads)) return null;
-  const current = uploads[record.id];
-  return { ...uploads, [record.id]: { ...current, ...record } };
-};
-var UploadManager = class {
-  constructor(client) {
-    this.client = client;
-    this.inFlightUploads = /* @__PURE__ */ new Map();
-    this.getUpload = (id) => this.uploads[id];
-    /**
-     * Clears all upload records.
-     * Invoked when the user disconnects so a later session does not inherit stale upload state.
-     * Aborts every in-flight upload request via its `UploadRequestOptions.abortSignal`.
-     */
-    this.reset = () => {
-      for (const { abortController } of this.inFlightUploads.values()) {
-        abortController.abort();
-      }
-      this.inFlightUploads.clear();
-      this.state.next(initState7());
-    };
-    /**
-     * Removes the upload record for `id` if present.
-     * If an upload is still in progress, aborts its `UploadRequestOptions.abortSignal`.
-     */
-    this.deleteUploadRecord = (id) => {
-      const flight = this.inFlightUploads.get(id);
-      if (flight) {
-        this.inFlightUploads.delete(id);
-        flight.abortController.abort();
-      }
-      this.state.next((current) => {
-        if (!(id in current.uploads)) return current;
-        const uploads = { ...current.uploads };
-        delete uploads[id];
-        return { ...current, uploads };
-      });
-    };
-    /**
-     * Starts an upload for `id`, or returns the existing in-flight promise if one is already running.
-     * Uses {@link StreamChat.channel}(`channelCid`) → `messageComposer.attachmentManager.doUploadRequest`.
-     * Resolves with that result; rejects if the upload rejects (the record is removed from state either way).
-     */
-    this.upload = ({
-      id,
-      channelCid,
-      file
-    }) => {
-      const existing = this.inFlightUploads.get(id);
-      if (existing) return existing.promise;
-      let resolvePromise;
-      let rejectPromise;
-      const promise = new Promise((resolve, reject) => {
-        resolvePromise = resolve;
-        rejectPromise = reject;
-      });
-      const abortController = new AbortController();
-      this.inFlightUploads.set(id, { promise, abortController });
-      void (async () => {
-        const attachmentManager = this.resolveAttachmentManager(channelCid);
-        const trackProgress = attachmentManager.config.trackUploadProgress;
-        try {
-          this.upsertUpload({
-            id,
-            uploadProgress: trackProgress ? 0 : void 0
-          });
-          const onProgress = trackProgress ? (progress) => {
-            this.updateUpload({
-              id,
-              uploadProgress: progress
-            });
-          } : void 0;
-          const uploadRequestOptions = {
-            abortSignal: abortController.signal,
-            ...onProgress ? { onProgress } : {}
-          };
-          const response = await attachmentManager.doUploadRequest(
-            file,
-            uploadRequestOptions
-          );
-          resolvePromise(response);
-        } catch (error) {
-          rejectPromise(error);
-        } finally {
-          this.inFlightUploads.delete(id);
-          this.deleteUploadRecord(id);
-        }
-      })();
-      return promise;
-    };
-    this.upsertUpload = (record) => {
-      this.state.partialNext({
-        uploads: upsertById(this.uploads, record)
-      });
-    };
-    this.updateUpload = (record) => {
-      this.state.next((current) => {
-        const nextUploads = updateById(current.uploads, record);
-        if (!nextUploads) return current;
-        return { ...current, uploads: nextUploads };
-      });
-    };
-    this.state = new StateStore(initState7());
-  }
-  resolveAttachmentManager(channelCid) {
-    const colon = channelCid.indexOf(":");
-    if (colon <= 0 || colon === channelCid.length - 1) {
-      throw new Error(`Invalid channelCid: ${channelCid}`);
-    }
-    const channelType = channelCid.slice(0, colon);
-    const channelId = channelCid.slice(colon + 1);
-    return this.client.channel(channelType, channelId).messageComposer.attachmentManager;
-  }
-  get uploads() {
-    return this.state.getLatestValue().uploads;
-  }
-};
-
 // src/signing.ts
 var import_jsonwebtoken = __toESM(require_jsonwebtoken());
 var import_crypto = __toESM(require_crypto());
@@ -12183,7 +12376,7 @@ var TokenManager = class {
 };
 
 // src/connection_fallback.ts
-var import_axios2 = __toESM(require("axios"));
+var import_axios3 = __toESM(require("axios"));
 var WSConnectionFallback = class {
   constructor({ client }) {
     /** @private */
@@ -12202,7 +12395,7 @@ var WSConnectionFallback = class {
     /** @private */
     this._req = async (params, config, retry) => {
       if (!this.cancelToken && !params.close) {
-        this.cancelToken = import_axios2.default.CancelToken.source();
+        this.cancelToken = import_axios3.default.CancelToken.source();
       }
       try {
         const res = await this.client.doAxiosRequest(
@@ -12238,7 +12431,7 @@ var WSConnectionFallback = class {
             }
           }
         } catch (error) {
-          if (import_axios2.default.isCancel(error)) {
+          if (import_axios3.default.isCancel(error)) {
             this._log(`_poll() - axios canceled request`);
             return;
           }
@@ -14661,7 +14854,7 @@ var StreamChat = class _StreamChat {
         return this.handleResponse(response);
       } catch (e) {
         e.client_request_id = requestConfig.headers?.["x-client-request-id"];
-        if (import_axios3.default.isCancel(e)) throw e;
+        if (import_axios4.default.isCancel(e)) throw e;
         this._logApiError(type, url, e);
         this.consecutiveFailures += 1;
         if (e.response) {
@@ -14810,16 +15003,12 @@ var StreamChat = class _StreamChat {
       }
     };
     this._callClientListeners = (event) => {
-      const client = this;
-      const listeners = [];
-      if (client.listeners.all) {
-        listeners.push(...client.listeners.all);
-      }
-      if (client.listeners[event.type]) {
-        listeners.push(...client.listeners[event.type]);
-      }
+      const listeners = [
+        ...this.listeners.all ?? [],
+        ...this.listeners[event.type] ?? []
+      ];
       for (const listener of listeners) {
-        listener(event);
+        invokeEventListener(listener, event, this.logger);
       }
     };
     this.recoverState = async () => {
@@ -14973,7 +15162,7 @@ var StreamChat = class _StreamChat {
         return this.userAgent;
       }
       if (!this.cachedUserAgent) {
-        const version = "9.51.0";
+        const version = "9.52.1";
         const { name: sdkName, version: sdkVersion } = this.sdkIdentifier ?? {};
         const { name: appName, version: appVersion } = this.appIdentifier ?? {};
         const { os, model: deviceModel } = this.deviceIdentifier ?? {};
@@ -15041,7 +15230,7 @@ var StreamChat = class _StreamChat {
         keepAliveMsecs: 3e3
       });
     }
-    this.axiosInstance = import_axios3.default.create(this.options);
+    this.axiosInstance = import_axios4.default.create(this.options);
     this.setBaseURL(this.options.baseURL || "https://chat.stream-io-api.com");
     if (typeof process !== "undefined" && "env" in process && process.env.STREAM_LOCAL_TEST_RUN) {
       this.setBaseURL("http://localhost:3030");
@@ -15062,7 +15251,7 @@ var StreamChat = class _StreamChat {
     this.defaultWSTimeoutWithFallback = 6 * 1e3;
     this.defaultWSTimeout = 15 * 1e3;
     this.axiosInstance.defaults.paramsSerializer = axiosParamsSerializer;
-    this.logger = isFunction(inputOptions.logger) ? inputOptions.logger : () => null;
+    this.logger = isFunction(inputOptions.logger) ? inputOptions.logger : noopLogger;
     this.recoverStateOnReconnect = this.options.recoverStateOnReconnect;
     this.threads = new ThreadManager({ client: this });
     this.polls = new PollManager({ client: this });
@@ -16393,6 +16582,11 @@ var StreamChat = class _StreamChat {
   }
   /**
    * unflagMessage - unflag a message
+   *
+   * @deprecated The `/moderation/unflag` endpoint is deprecated and is a no-op on
+   * the backend - calling this resolves successfully but does not remove the flag.
+   * Use `client.moderation.submitAction()` against the review queue item instead.
+   *
    * @param {string} targetMessageID
    * @param {string} [options.user_id] currentUserID, only used with serverside auth
    * @returns {Promise<APIResponse>}
@@ -16405,6 +16599,11 @@ var StreamChat = class _StreamChat {
   }
   /**
    * unflagUser - unflag a user
+   *
+   * @deprecated The `/moderation/unflag` endpoint is deprecated and is a no-op on
+   * the backend - calling this resolves successfully but does not remove the flag.
+   * Use `client.moderation.submitAction()` against the review queue item instead.
+   *
    * @param {string} targetID
    * @param {string} [options.user_id] currentUserID, only used with serverside auth
    * @returns {Promise<APIResponse>}
@@ -16689,7 +16888,10 @@ var StreamChat = class _StreamChat {
     if (!message.id) {
       throw Error("Please specify the message.id when calling updateMessage");
     }
-    const payload = toUpdatedMessagePayload(message);
+    const payload = sanitizeOutgoingAttachments({
+      client: this,
+      message: toUpdatedMessagePayload(message)
+    });
     if (typeof partialUserOrUserId === "string") {
       payload.user_id = partialUserOrUserId;
     } else if (typeof partialUserOrUserId?.id === "string") {
@@ -18505,7 +18707,7 @@ var OfflineError = class extends Error {
 };
 
 // src/offline-support/offline_sync_manager.ts
-var import_axios4 = require("axios");
+var import_axios5 = require("axios");
 var OfflineDBSyncManager = class {
   constructor({
     client,
@@ -18653,7 +18855,7 @@ var OfflineDBSyncManager = class {
         });
       } catch (e) {
         console.log("An error has occurred while syncing the DB.", e);
-        if ((0, import_axios4.isAxiosError)(e) && e.code === "ECONNABORTED") {
+        if ((0, import_axios5.isAxiosError)(e) && e.code === "ECONNABORTED") {
           return;
         }
         const error = e;
@@ -19162,6 +19364,7 @@ var AbstractOfflineDB = class {
         return this.handleMessageUpdatedEvent({ event, execute });
       }
       if (type === "message.read" || type === "notification.mark_read") {
+        if (event.thread) return [];
         return this.handleRead({ event, unreadMessages: 0, execute });
       }
       if (type === "message.read_locally") {