mirror of
https://github.com/permissionlesstech/bitchat.git
synced 2026-07-24 22:45:19 +00:00
jackandGitHub
820c933958
Centralize PTT and voice audio-session ownership, harden courier/bridge/outbox delivery and recovery, correct location and delivery-state races, add privacy/release metadata, and ship reproducible universal Arti slices with Release CI coverage. Validated by the full iOS suite, repeated audio/fragment/performance regressions, BitFoundation tests, strict lint and dead-code analysis, universal iOS Release builds, and iOS/macOS archives.
95 lines
4.6 KiB
Markdown
95 lines
4.6 KiB
Markdown
# Arti Binary Provenance
|
|
|
|
This repo vendors a prebuilt Arti static-library xcframework at:
|
|
|
|
`localPackages/Arti/Frameworks/arti.xcframework`
|
|
|
|
SwiftPM links it through `localPackages/Arti/Package.swift` as the binary target named `arti`. Treat changes to this artifact like dependency updates: review the Rust sources, lockfile, build script, produced headers, and artifact hashes together.
|
|
|
|
## Source Inputs
|
|
|
|
- Rust workspace: `localPackages/Arti/Cargo.toml`
|
|
- Crate: `localPackages/Arti/arti-bitchat`
|
|
- Dependency lockfile: `localPackages/Arti/Cargo.lock`
|
|
- Build script: `localPackages/Arti/build-ios.sh`
|
|
- Exported C header: `localPackages/Arti/Frameworks/include/arti.h`
|
|
|
|
The crate declares `rust-version = "1.90"` and uses `arti-client` / `tor-rtcompat` `0.38` with minimal Tokio/Rustls features. The current lockfile requires Rust 1.90 or newer. The build script currently targets:
|
|
|
|
- `aarch64-apple-ios`
|
|
- `aarch64-apple-ios-sim`
|
|
- `x86_64-apple-ios`
|
|
- `aarch64-apple-darwin`
|
|
- `x86_64-apple-darwin`
|
|
|
|
It builds release static libraries with size-oriented flags (`opt-level=z`, fat LTO, one codegen unit, `panic=abort`, stripped symbols), normalizes static-archive metadata with `xcrun libtool -static -D`, then packages them with `xcodebuild -create-xcframework`.
|
|
|
|
## Regenerating The Artifact
|
|
|
|
From the repo root:
|
|
|
|
```sh
|
|
cd localPackages/Arti
|
|
rustup toolchain install 1.96.0
|
|
rustup target add --toolchain 1.96.0 aarch64-apple-ios aarch64-apple-ios-sim x86_64-apple-ios aarch64-apple-darwin x86_64-apple-darwin
|
|
rustup run 1.96.0 cargo install cbindgen --version 0.29.4 --locked
|
|
./build-ios.sh
|
|
```
|
|
|
|
`build-ios.sh` defaults to the audited `1.96.0` toolchain and refuses a rustc
|
|
version other than `1.96.0`; it likewise requires cbindgen `0.29.4`. Set
|
|
`RUST_TOOLCHAIN`, `RUSTC_VERSION`, or `CBINDGEN_VERSION` explicitly only when
|
|
intentionally updating the binary provenance and hashes below.
|
|
|
|
After rebuilding, verify that:
|
|
|
|
- `Cargo.lock` changes are intentional and reviewed.
|
|
- `Frameworks/include/arti.h` still matches the exported FFI functions used by `TorManager`.
|
|
- `Frameworks/arti.xcframework` contains iOS device arm64, universal iOS simulator arm64+x86_64, and universal macOS arm64+x86_64 slices.
|
|
- The main app still passes iOS tests and the macOS build.
|
|
|
|
## Audited Rebuild
|
|
|
|
The July 2026 artifact below was rebuilt from source on this host with:
|
|
|
|
```text
|
|
rustc 1.96.0 (ac68faa20 2026-05-25)
|
|
cargo 1.96.0 (30a34c682 2026-05-25)
|
|
rustup 1.29.0 (28d1352db 2026-03-05)
|
|
cbindgen 0.29.4
|
|
Xcode 26.6
|
|
Build version 17F113
|
|
```
|
|
|
|
Rust 1.86.0 was also checked during the audit and no longer builds this lockfile because `typed-index-collections@3.4.0` requires Rust 1.90.0 or newer.
|
|
|
|
The build script now normalizes static-archive metadata and writes a stable xcframework `Info.plist`. Two consecutive no-source-change rebuilds on this host produced the same hashes below.
|
|
|
|
## Current Artifact Hashes
|
|
|
|
Run this from the repo root to verify the checked-in artifact:
|
|
|
|
```sh
|
|
find localPackages/Arti/Frameworks/arti.xcframework -maxdepth 3 -type f -print0 | sort -z | xargs -0 shasum -a 256
|
|
```
|
|
|
|
Current hashes:
|
|
|
|
```text
|
|
cac99db408280bbef15cae8ce64c8ccdbf2e8863c205168d59f83fe8ab680f94 localPackages/Arti/Frameworks/arti.xcframework/Info.plist
|
|
551655904834748c9dc36034fdbc9465e7533aef1e4a6514b4fcc75875b93058 localPackages/Arti/Frameworks/arti.xcframework/ios-arm64/Headers/arti.h
|
|
5461a231a786812e91e7965290031ea3479fdc5c6459553e46988ecafbbc2a3d localPackages/Arti/Frameworks/arti.xcframework/ios-arm64/libarti_bitchat.a
|
|
551655904834748c9dc36034fdbc9465e7533aef1e4a6514b4fcc75875b93058 localPackages/Arti/Frameworks/arti.xcframework/ios-arm64_x86_64-simulator/Headers/arti.h
|
|
af8f5f636eb6affb309b3e44f13e48498eb2540c77af44ddcd7fdf9241b1e317 localPackages/Arti/Frameworks/arti.xcframework/ios-arm64_x86_64-simulator/libarti_bitchat.a
|
|
551655904834748c9dc36034fdbc9465e7533aef1e4a6514b4fcc75875b93058 localPackages/Arti/Frameworks/arti.xcframework/macos-arm64_x86_64/Headers/arti.h
|
|
7c9afe98227f1767567ddcd4e35d9dfffe70309c302c4dbc9a6c9d6aeefab007 localPackages/Arti/Frameworks/arti.xcframework/macos-arm64_x86_64/libarti_bitchat.a
|
|
```
|
|
|
|
## Review Checklist
|
|
|
|
- Record `rustc --version`, `cargo --version`, `cbindgen --version`, and `xcodebuild -version` in the PR when refreshing the binary.
|
|
- Include the hash output above after any binary change.
|
|
- If a rebuild changes only xcframework/library bytes, record the new hashes and app validation evidence in the PR.
|
|
- Keep `target/`, `.build/`, and `.swiftpm/` out of source control.
|
|
- Do not accept an xcframework-only update without matching source, lockfile, or build-script evidence explaining where it came from.
|