Struct AppHandle 

pub struct AppHandle { /* private fields */ }

Implementations

impl AppHandle

pub async fn start() -> Result<Self>

pub async fn start_with_options( mode: NetworkMode, port: u16, master_key: Option<&[u8; 32]>, relays: Vec<Multiaddr>, ) -> Result<Self>

pub async fn start_with_db(db: Db) -> Result<Self>

pub async fn start_with_db_and_options( db: Db, mode: NetworkMode, port: u16, session_persist_key: [u8; 32], relays: Vec<Multiaddr>, ) -> Result<Self>

pub fn mode(&self) -> NetworkMode

pub fn subscribe(&self) -> Receiver<AppEvent>

pub fn fingerprint(&self) -> &str

pub fn peer_id(&self) -> PeerId

pub fn discovered_rooms(&self) -> Vec<DiscoveredRoom>

pub fn active_room_ids(&self) -> Vec<String>

pub fn active_room_info(&self, room_id: &str) -> Option<StoredRoom>

pub fn room_members(&self, room_id: &str) -> Vec<String>

pub fn room_messages( &self, room_id: &str, limit: i64, ) -> Result<Vec<StoredRoomMessage>>

pub fn search_room_messages( &self, room_id: &str, query: &str, limit: i64, ) -> Result<Vec<StoredRoomMessage>>

pub async fn start_room( &self, name: &str, encrypted: bool, passphrase: Option<&str>, ) -> Result<String>

Create a new room. Returns its room_id.

pub async fn join_room( &self, room_id: &str, passphrase: Option<&str>, ) -> Result<()>

Join an existing room. The room may come from a live announcement (preferred), our restorable set, or the DB directly — whichever has the freshest copy. For encrypted rooms passphrase is required.

pub async fn leave_room(&self, room_id: &str) -> Result<bool>

Leave a room. Returns true when the MemberLeave notice was handed to the network layer, false when it couldn’t be encoded (peers then only notice via the discovered-room TTL). The local leave always succeeds regardless.

pub async fn send_room_message(&self, room_id: &str, body: &str) -> Result<()>

pub async fn shutdown(&self)

pub async fn dial(&self, input: &str) -> Result<()>

Dial a peer by a user-entered address. Accepts:

• 1.2.3.4:9000
• [fe80::1]:9000
• /ip4/.../tcp/...[/p2p/<peer>] (raw multiaddr)

pub fn known_peers(&self) -> Vec<KnownPeerStatus>

pub async fn forget_peer(&self, address: &str) -> Result<()>

pub async fn redial(&self, address: &str) -> Result<()>

Re-dial a stored address — used by the lobby’s “reconnect” action.

pub async fn accept_inbound(&self, peer_id: PeerId, address: &str)

Phase A: user pressed Accept on the inbound-dial modal. Promotes the peer to the gossipsub mesh. Does NOT mark them trusted — that’s trust_inbound, the explicit “remember and bypass next time” path.

pub async fn reject_inbound( &self, peer_id: PeerId, fingerprint: &str, ) -> Result<()>

Phase A: user pressed Reject on the inbound-dial modal. Disconnects the peer, adds them to the persistent blocklist, and ensures every subsequent connection attempt from this fingerprint is auto- dropped without re-prompting.

pub async fn trust_inbound( &self, peer_id: PeerId, fingerprint: &str, address: &str, ) -> Result<()>

Phase A: user pressed Trust+Accept — accept the connection AND remember the peer so subsequent connections bypass the modal.

pub async fn send_file(&self, room_id: &str, path: &Path) -> Result<String>

Send a local file to a room. Reads the file, optionally encrypts it for encrypted rooms, chunks it, broadcasts a FileOffer then each FileChunk. Returns the file_id once all chunks are queued.

pub async fn save_to_downloads( &self, room_id: &str, file_id: &str, ) -> Result<PathBuf>

Save a completed/ready attachment to the user’s Downloads folder. Decrypts encrypted attachments on the way out.

pub async fn cancel_transfer(&self, room_id: &str, file_id: &str) -> Result<()>

Drop any in-flight chunks and remove the attachment row.

pub fn open_saved(&self, room_id: &str, file_id: &str) -> Result<()>

Launch the system’s default opener on a saved file.

pub fn list_room_attachments( &self, room_id: &str, ) -> Result<Vec<StoredAttachment>>

pub fn set_member_verified( &self, room_id: &str, fingerprint: &str, verified: bool, ) -> Result<()>

Mark a peer’s fingerprint as verified in the given room. Used by the ^V verification modal after the user has compared the fingerprint out-of-band.

pub fn verified_fingerprints(&self, room_id: &str) -> Vec<String>

pub fn is_owner(&self, room_id: &str, fingerprint: &str) -> bool

Phase B: is fingerprint an owner of room_id? Used by the TUI to gate ^K / ^G and the kick/grant member-picker actions.

pub fn we_are_owner(&self, room_id: &str) -> bool

pub fn room_owners(&self, room_id: &str) -> Vec<String>

Phase B: list current owner fingerprints for room_id — used to render an owner badge in the member panel.

pub fn verified_only_inbound(&self) -> bool

Phase E: global toggle — when true, inbound dials from unverified fingerprints are auto-rejected without prompting.

pub fn set_verified_only_inbound(&self, on: bool) -> Result<()>

pub fn room_verified_only(&self, room_id: &str) -> bool

Phase E: per-room verified-only-join. When true, the host (and every honest existing member) drops MemberAnnounce from joiners who aren’t globally SAS-verified, and the lowest-fp owner sends back a signed JoinRefused so the joiner sees an explanation.

pub fn set_room_verified_only(&self, room_id: &str, on: bool) -> Result<()>

pub fn onboarding_seen(&self) -> bool

Phase H: first-launch onboarding flag.

pub fn mark_onboarding_seen(&self) -> Result<()>

pub async fn grant_owner( &self, room_id: &str, target_fingerprint: &str, ) -> Result<()>

Phase B: promote target_fingerprint to owner. Builds a signed OwnerGrant, broadcasts it, and applies it locally. Returns an error if we ourselves aren’t an owner — only owners can grant.

pub async fn kick_member( &self, room_id: &str, target_fingerprint: &str, ) -> Result<String>

Phase B: kick target_fingerprint from room_id. Broadcasts a signed BanMember, records the ban locally, then immediately rotates the room key under a freshly-generated passphrase. Returns the new passphrase so the caller can show it to the owner for out-of-band sharing with remaining members.

The rotation is the cryptographic enforcement: a banned peer can still subscribe to the gossipsub topic and see the ciphertext, but they can’t unwrap the new session key without the new passphrase, so they can’t decrypt anything sent after the kick.

pub fn generate_join_code(&self, room_id: &str) -> Result<String>

Phase F: generate an 8-char alphanumeric join code for room_id, good for 10 minutes. Stored in memory only on the issuing owner’s machine — a single use clears it. Caller is responsible for sharing the code OOB with the prospective joiner.

Owner-only. Errors if room_id isn’t active or we’re not an owner.

pub async fn join_room_with_code(&self, room_id: &str, code: &str) -> Result<()>

Phase F: join room_id using a short-lived code instead of the passphrase. Generates an ephemeral X25519 keypair, broadcasts a signed CodeJoinRequest, and waits for the owner’s CodeJoinResponse. The receive arm builds an ActiveRoom flagged read-only (no passphrase = can’t share our outbound session key with others).

pub async fn sas_start( &self, room_id: &str, target_fingerprint: &str, ) -> Result<String>

Phase G: start an SAS verification with target_fingerprint in room_id. Returns the tx_id so the caller can correlate subsequent events. The full flow is asynchronous — the partner must accept on their end, both compute the ECDH-derived SAS code, OOB-compare it, and each press Match.

pub async fn sas_match(&self, tx_id: &str) -> Result<()>

Phase G: user pressed Match on the SAS code modal — broadcast our signed SasConfirm{matched: true}. If the partner has already matched, this completes verification on both sides.

pub fn sas_cancel(&self, tx_id: &str)

Phase G: cancel an in-flight SAS — drop our local state. Doesn’t broadcast a “matched=false” notice in v1 (partner’s flow stays dangling; they can cancel their side too). Quiet teardown.

pub fn display_name(&self) -> Option<String>

pub fn set_display_name(&self, name: Option<&str>) -> Result<()>

pub fn lookup_member_display_name(&self, fingerprint: &str) -> Option<String>

Look up the display name we’ve seen for a peer in any room.

pub fn is_room_muted(&self, room_id: &str) -> bool

pub fn set_room_muted(&self, room_id: &str, muted: bool) -> Result<()>

pub async fn broadcast_typing(&self, room_id: &str)

Broadcast a “I’m typing” pulse to the given room. Caller is responsible for debouncing (don’t fire more than every ~500ms).

pub fn typers_in_room(&self, room_id: &str) -> Vec<String>

Returns the fingerprints of peers currently typing in room_id, pruning entries past their TTL.

pub async fn rotate_room( &self, room_id: &str, new_passphrase: &str, ) -> Result<()>

Rotate this room’s outbound Megolm session under a fresh passphrase. Broadcasts RotateRoomKey (so other members know to expect a new passphrase) and a fresh MemberAnnounce with the new wrapped session key. Old inbound sessions stay in storage for decrypting historic messages.

pub async fn accept_rotation( &self, room_id: &str, new_salt: &[u8], new_passphrase: &str, ) -> Result<()>

Used by the TUI when another member rotates a room we’re in. Derives the new key, updates our local state, and re-announces so the rotator can share their fresh outbound session with us.

Trait Implementations

impl Clone for AppHandle

fn clone(&self) -> AppHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.