permissionlesstech/bitchat
1
0
Fork 0
mirror of https://github.com/permissionlesstech/bitchat.git synced 2026-07-24 22:45:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Compile all logging out of release builds

Browse Source 
Production builds previously still emitted info/warning/error entries
via os_log (content private-redacted, but entries, categories, and
timing metadata were visible, and message strings were constructed).
For a privacy-first app the right posture is silence: every SecureLogger
wrapper and both cores are now gated behind #if DEBUG, so release
builds construct no log strings and emit nothing. Debug builds are
unchanged (public formatting, level threshold via BITCHAT_LOG_LEVEL).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
jack
2026-06-11 19:31:28 +02:00
co-authored by Claude Fable 5
parent 8899cb7f9e
commit cf3b85f65c
1 changed files with 13 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
localPackages/BitLogger/Sources/SecureLogger.swift
+13 -12
View File
@@ -136,25 +136,32 @@ public extension SecureLogger {
static func info(_ message: @autoclosure () -> String, category: OSLog = .noise,
file: String = #file, line: Int = #line, function: String = #function) {
#if DEBUG
guard shouldLog(.info) else { return }
log(message(), category: category, level: .info, file: file, line: line, function: function)
#endif
}
static func warning(_ message: @autoclosure () -> String, category: OSLog = .noise,
file: String = #file, line: Int = #line, function: String = #function) {
#if DEBUG
guard shouldLog(.warning) else { return }
log(message(), category: category, level: .warning, file: file, line: line, function: function)
#endif
}
static func error(_ message: @autoclosure () -> String, category: OSLog = .noise,
file: String = #file, line: Int = #line, function: String = #function) {
#if DEBUG
guard shouldLog(.error) else { return }
log(message(), category: category, level: .error, file: file, line: line, function: function)
#endif
}
/// Log errors with context
static func error(_ error: Error, context: @autoclosure () -> String, category: OSLog = .noise,
file: String = #file, line: Int = #line, function: String = #function) {
#if DEBUG
let location = formatLocation(file: file, line: line, function: function)
let sanitized = context().sanitized()
let errorDesc = error.localizedDescription.sanitized()
@@ -164,6 +171,7 @@ public extension SecureLogger {
#else
os_log("%{private}@ Error in %{private}@: %{private}@", log: category, type: .error, location, sanitized, errorDesc)
#endif
#endif
}
}
@@ -242,32 +250,25 @@ private extension SecureLogger {
/// Log general messages with automatic sensitive data filtering
static func log(_ message: @autoclosure () -> String, category: OSLog, level: LogLevel,
file: String, line: Int, function: String) {
// All public wrappers are compiled out of release builds; this core
// is gated too so no future call path can reintroduce production
// logging. bitchat is privacy-first: release builds emit nothing.
#if DEBUG
guard shouldLog(level) else { return }
let location = formatLocation(file: file, line: line, function: function)
let sanitized = "\(location) \(message())".sanitized()
#if DEBUG
os_log("%{public}@", log: category, type: level.osLogType, sanitized)
#else
// In release builds, only log non-debug messages
if level != .debug {
os_log("%{private}@", log: category, type: level.osLogType, sanitized)
}
#endif
}
/// Log a security event
static func logSecurityEvent(_ event: SecurityEvent, level: LogLevel = .info,
file: String, line: Int, function: String) {
#if DEBUG
guard shouldLog(level) else { return }
let location = formatLocation(file: file, line: line, function: function)
let message = "\(location) \(event.message)"
#if DEBUG
os_log("%{public}@", log: .security, type: level.osLogType, message)
#else
// In release, use private logging to prevent sensitive data exposure
os_log("%{private}@", log: .security, type: level.osLogType, message)
#endif
}