Minimal millisecond-resolution perf logger that writes straight to
Android logcat (or stderr off-Android with IRIS_PERF_LOG=1) without pulling in log +
android_logger crates. Used to diagnose where time goes between an
FFI dispatch, the core thread processing, and the UI reconcile.
Core-internal hot-loop counters. FFI surface counters can only
catch shells that re-enter the core in a loop — the
build_runtime_debug_snapshot regression that caused the macOS CPU
loop was entirely internal (relay events fanned out through
persist_best_effort_inner → persist_debug_snapshot_best_effort
→ full SessionManager clone × N known users). The release-gate
budget tests assert on this snapshot too so the next time core
work explodes per event, CI catches it before a device does.
Compatibility facade for desktop callers that still own the Nearby UI lifecycle.
FIPS owns discovery and transport; peer snapshots arrive through AppUpdate.
A person discovered from local profiles, the account’s social graph, or the
global profile index. Chat capability is resolved only after selection;
shells only render these fields.
One row inside the “Messages” section of a search result. Shells
use the conversation identity for global results and the author identity
for results within a chat. Both are resolved from persisted history so
searching older messages does not depend on the loaded timeline.
Classification of the free-text input typed into a chat-action
field — the search bar, the “New chat” paste field, the share-link
handler. Centralising the parsing here means the UI just looks at
the enum and dispatches; no platform has its own ad-hoc
contains("://") && contains("#") check.
Capability of the selected direct-chat peer. Profile search results are
locators only; the composer unlocks after current owner-signed evidence is
resolved. Group chats expose None.
Each selected destination belongs to one acceptance. abort must remove only
newly created partial outputs; it must never delete or truncate existing files.
prepare must clean its own partial preparation on error, without disturbing an
already-open destination if the same object is accidentally reused.
Marketing version baked in at build time from IRIS_APP_VERSION_NAME
(or IRIS_APP_VERSION), falling back to the crate semver. Use this
instead of env!("CARGO_PKG_VERSION") so UI/release artifacts agree
on a single version string.
Deterministic high-volume shell fixture for list, navigation, and message
rendering tests. This is intentionally synthetic: relay-backed tests cover
protocol behaviour, while this keeps UI/perf tests fast and reproducible.
Deterministic grouped search fixture for shell tests that need to verify
collapsed initial rendering plus “View more” expansion without writing a
large on-disk message index first.
Single source of truth for “is this typed text an npub or an
invite URL?”. Used by the New Chat paste field, the chat-list
search bar, and the deep-link handler so all three branches agree
on what counts as a chat-opening shortcut. Returns None for
regular search-style text.
Compute the list of chats that should raise a notification given two
successive AppState chat-list snapshots. Single source of truth for
suppression — chat muted, chat open with app foregrounded, outgoing
last message, no unread increase, or global pref off. Use this from
Android, macOS, Linux, and Windows. iOS APNS uses a separate path
that cannot suppress until Apple grants the filtering entitlement.
Decrypt a notification payload against the persisted double-ratchet
state under data_dir. Use from the FCM service (Android) or
Notification Service Extension (iOS) where there’s no live FfiApp.
Falls back to the generic resolver when keys, payload, or storage
are unavailable so the user still gets some notification.
Render text to a QR-code module matrix. Returns a square matrix encoded
as 1/0 characters in row-major order. Returns None for inputs that
don’t fit at the medium error-correction level.
Legacy notification servers reject time bounds. Retry with muted authors excluded
entirely, never by dropping the bound while keeping those authors subscribed.
Predicts the screen stack that [AppCore::push_screen] will produce, so a
shell can show the destination before the core confirms it. None means
the push has no predictable result and the shell must wait for the core.
Convert any pubkey-shaped input (hex, npub, nprofile, …) to its
canonical lowercase-hex form. The empty string is returned when the
input can’t be parsed as a public key — callers expecting hex
downstream can short-circuit on that.
Pull the open chat id out of a Router, falling back to its default
screen. Shells normally just call this with state.router so they
don’t each reimplement the Screen::Chat { chat_id } extraction.
Check account ownership without changing the database or opening a live core.
CLI history readers use this while another process may own the session lock.