Files
bitchat/bitchat/ViewModels/ChatViewModelBootstrapper.swift
T
jackandClaude Fable 5 8899cb7f9e Add field correctness diagnostics: store invariant audit, drop and bounds proofs
ConversationStore.auditInvariants() verifies the per-conversation and
store-level message-ID indexes, caps, timestamp ordering, unread-set
membership, and selection validity - wired to the existing read-receipt
cleanup cadence, loud (.error) on violation, sampled heartbeat when
healthy (~2.8ms per audit at 5k messages, benchmarked and floored).
Router drops log both outcomes (marked failed / skipped by no-downgrade
guard); relay cap evictions, age sweeps, and jittered reconnect delays
log their counts; mirrored republishes get a sampled proof line. 11 new
invariant tests corrupt store state through DEBUG-only hooks since the
single-writer lockdown makes those states unreachable via intents.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-11 19:28:47 +02:00

273 lines
10 KiB
Swift

import BitFoundation
import BitLogger
import Combine
import Foundation
struct ChatViewModelServiceBundle {
let commandProcessor: CommandProcessor
let messageRouter: MessageRouter
let privateChatManager: PrivateChatManager
let unifiedPeerService: UnifiedPeerService
let autocompleteService: AutocompleteService
let deduplicationService: MessageDeduplicationService
let publicMessagePipeline: PublicMessagePipeline
@MainActor
init(
keychain: KeychainManagerProtocol,
idBridge: NostrIdentityBridge,
identityManager: SecureIdentityStateManagerProtocol,
meshService: Transport
) {
let commandProcessor = CommandProcessor(identityManager: identityManager)
let privateChatManager = PrivateChatManager(meshService: meshService)
let unifiedPeerService = UnifiedPeerService(
meshService: meshService,
idBridge: idBridge,
identityManager: identityManager
)
let nostrTransport = NostrTransport(keychain: keychain, idBridge: idBridge)
nostrTransport.senderPeerID = meshService.myPeerID
let messageRouter = MessageRouter(transports: [meshService, nostrTransport])
self.commandProcessor = commandProcessor
self.messageRouter = messageRouter
self.privateChatManager = privateChatManager
self.unifiedPeerService = unifiedPeerService
self.autocompleteService = AutocompleteService()
self.deduplicationService = MessageDeduplicationService()
self.publicMessagePipeline = PublicMessagePipeline()
}
}
@MainActor
final class ChatViewModelBootstrapper {
private unowned let viewModel: ChatViewModel
init(viewModel: ChatViewModel) {
self.viewModel = viewModel
}
static func loadPersistedReadReceipts(userDefaults: UserDefaults = .standard) -> Set<String> {
guard let data = userDefaults.data(forKey: "sentReadReceipts"),
let receipts = try? JSONDecoder().decode([String].self, from: data) else {
return []
}
return Set(receipts)
}
func configure() {
wireServiceGraph()
bindFeatureObjectChanges()
loadPersistedViewState()
configureTransport()
startRuntimeServices()
bindPeerService()
configureNoiseCallbacks()
bindTransferProgress()
configureGeoChannels()
bindTeleportState()
requestNotifications()
registerObservers()
}
}
private extension ChatViewModelBootstrapper {
func wireServiceGraph() {
viewModel.privateChatManager.conversationStore = viewModel.conversations
viewModel.privateChatManager.messageRouter = viewModel.messageRouter
viewModel.privateChatManager.unifiedPeerService = viewModel.unifiedPeerService
viewModel.unifiedPeerService.messageRouter = viewModel.messageRouter
// Surface silent outbox drops (attempt cap, TTL expiry, overflow
// eviction) as a visible failure. The store's no-downgrade rule does
// not cover `.failed` over confirmed receipts, so guard here: a drop
// of an already-delivered/read message (e.g. a stale retained copy)
// must not downgrade its status.
viewModel.messageRouter.onMessageDropped = { [weak viewModel] messageID, peerID in
guard let viewModel else { return }
switch viewModel.conversations.deliveryStatus(forMessageID: messageID) {
case .delivered, .read:
// Field proof of the no-downgrade guard: the drop arrived
// after a confirmed receipt, so the `.failed` write is
// deliberately skipped.
SecureLogger.warning(
"📤 Router dropped message \(messageID.prefix(8))… for \(peerID.id.prefix(8))… → .failed skipped (already delivered/read)",
category: .session
)
default:
SecureLogger.warning(
"📤 Router dropped message \(messageID.prefix(8))… for \(peerID.id.prefix(8))… → marked failed",
category: .session
)
viewModel.conversations.setDeliveryStatus(
.failed(reason: "Not delivered"),
forMessageID: messageID
)
}
}
viewModel.commandProcessor.contextProvider = viewModel
viewModel.commandProcessor.meshService = viewModel.meshService
viewModel.participantTracker.configure(context: viewModel)
}
func bindFeatureObjectChanges() {
viewModel.privateChatManager.objectWillChange
.sink { [weak viewModel] _ in
viewModel?.objectWillChange.send()
}
.store(in: &viewModel.cancellables)
// Private message state flows through the single-writer
// `ConversationStore` intents and its `changes` subject; selection
// is owned by the store too (`PrivateChatManager.selectedPeer` is a
// read-only mirror), so no selection bridge is needed here.
viewModel.participantTracker.objectWillChange
.sink { [weak viewModel] _ in
viewModel?.objectWillChange.send()
}
.store(in: &viewModel.cancellables)
}
func loadPersistedViewState() {
viewModel.loadNickname()
viewModel.loadVerifiedFingerprints()
}
func configureTransport() {
viewModel.meshService.delegate = viewModel
viewModel.meshService.eventDelegate = viewModel
DispatchQueue.main.asyncAfter(deadline: .now() + TransportConfig.uiStartupInitialDelaySeconds) { [weak viewModel] in
guard let viewModel else { return }
_ = viewModel.getMyFingerprint()
}
viewModel.meshService.setNickname(viewModel.nickname)
}
func startRuntimeServices() {
viewModel.meshService.startServices()
viewModel.publicMessagePipeline.delegate = viewModel.publicConversationCoordinator
DispatchQueue.main.asyncAfter(deadline: .now() + 0.1) { [weak viewModel] in
guard let viewModel,
let bleService = viewModel.meshService as? BLEService else { return }
let state = bleService.getCurrentBluetoothState()
viewModel.updateBluetoothState(state)
}
viewModel.nostrRelayManager = NostrRelayManager.shared
viewModel.messageRouter.flushAllOutbox()
Task { @MainActor [weak viewModel] in
guard let viewModel else { return }
try? await Task.sleep(
nanoseconds: UInt64(TransportConfig.uiStartupPhaseDurationSeconds * 1_000_000_000)
)
viewModel.isStartupPhase = false
}
}
func bindPeerService() {
viewModel.unifiedPeerService.$peers
.receive(on: DispatchQueue.main)
.sink { [weak viewModel] peers in
Task { @MainActor [weak viewModel] in
guard let viewModel else { return }
viewModel.allPeers = peers
var uniquePeers: [PeerID: BitchatPeer] = [:]
for peer in peers {
if uniquePeers[peer.peerID] == nil {
uniquePeers[peer.peerID] = peer
} else {
SecureLogger.warning(
"⚠️ Duplicate peer ID detected: \(peer.peerID) (\(peer.displayName))",
category: .session
)
}
}
viewModel.peerIndex = uniquePeers
if viewModel.hasTrackedPrivateChatSelection {
viewModel.updatePrivateChatPeerIfNeeded()
}
}
}
.store(in: &viewModel.cancellables)
}
func configureNoiseCallbacks() {
viewModel.setupNoiseCallbacks()
}
func bindTransferProgress() {
TransferProgressManager.shared.publisher
.receive(on: DispatchQueue.main)
.sink { [weak viewModel] event in
Task { @MainActor [weak viewModel] in
viewModel?.handleTransferEvent(event)
}
}
.store(in: &viewModel.cancellables)
}
func configureGeoChannels() {
viewModel.geoChannelCoordinator = GeoChannelCoordinator(
locationManager: viewModel.locationManager,
context: viewModel
)
}
func bindTeleportState() {
viewModel.locationManager.$teleported
.receive(on: DispatchQueue.main)
.sink { [weak viewModel] isTeleported in
guard let viewModel else { return }
Task { @MainActor [weak viewModel] in
guard let viewModel,
case .location(let channel) = viewModel.activeChannel,
let identity = try? viewModel.idBridge.deriveIdentity(forGeohash: channel.geohash)
else {
return
}
let key = identity.publicKeyHex.lowercased()
let hasRegional = !viewModel.locationManager.availableChannels.isEmpty
let inRegional = viewModel.locationManager.availableChannels.contains {
$0.geohash == channel.geohash
}
if isTeleported && hasRegional && !inRegional {
viewModel.locationPresenceStore.markTeleported(key)
} else {
viewModel.locationPresenceStore.clearTeleported(key)
}
}
}
.store(in: &viewModel.cancellables)
}
func requestNotifications() {
NotificationService.shared.requestAuthorization()
}
func registerObservers() {
NotificationCenter.default.addObserver(
viewModel,
selector: #selector(ChatViewModel.handleFavoriteStatusChanged(_:)),
name: .favoriteStatusChanged,
object: nil
)
NotificationCenter.default.addObserver(
viewModel,
selector: #selector(ChatViewModel.handlePeerStatusUpdate(_:)),
name: Notification.Name("peerStatusUpdated"),
object: nil
)
}
}