tane/apps/app_seeds/lib/bootstrap.dart
vjrj fed0e8200e feat(sharing): make going online opt-in, and show what it unlocks
Tane dialled its four default relays at launch, before anyone had asked
for anything — an F-Droid reviewer spotted it, and they were right. The
seed book needs no network at all, so the app should not have one until
the person joins the sharing side.

- SocialSettings gains a three-state `sharingEnabled`. `null` means
  "never asked", which is what lets `migrateSharingEnabled` keep an
  existing install exactly as it was: anyone past the intro was on a
  build that connected at launch, so they keep messaging, device sync
  and offer alerts. A fresh install starts fully offline.
- bootstrap only starts the shared connection when sharing is on. The
  inbox/sync/plantaré/alert listeners are untouched: they react to a
  session, and none arrives.
- SharingSwitch is the single place that moves the stored choice, the
  live connection and the flag the UI listens to, so they cannot drift.
- Agreeing to the community rules is the opt-in — one consent surface,
  reached from the market or from the drawer's invitation.
- SocialConnection.start is now idempotent and gains stop(), so turning
  sharing off goes offline immediately instead of at the next launch.
- The social drawer entries stay visible but padlocked while sharing is
  off; tapping one explains what wakes up and offers to join. Hiding
  them would have kept the tool a secret. "Coming soon" is gone for
  good — everything it labelled is built.

Covered by tests for the migration in both directions, start/stop
lifecycle, the gate turning sharing on, the invitation, and the drawer
in all three states (no social layer / off / on).
2026-07-25 16:47:56 +02:00

220 lines
8.4 KiB
Dart

import 'dart:async';
import 'package:flutter/material.dart';
import 'package:flutter_localizations/flutter_localizations.dart';
import 'app.dart';
import 'data/species_repository.dart';
import 'data/variety_repository.dart';
import 'di/injector.dart';
import 'i18n/strings.g.dart';
import 'services/auto_backup_service.dart';
import 'services/camera_availability.dart';
import 'services/coarse_location.dart';
import 'services/inbox_service.dart';
import 'services/locale_store.dart';
import 'services/message_store.dart';
import 'services/notification_service.dart';
import 'services/offer_outbox.dart';
import 'services/onboarding_store.dart';
import 'services/plantare_service.dart';
import 'services/profile_cache.dart';
import 'services/profile_store.dart';
import 'services/saved_offers_store.dart';
import 'services/saved_search_alert_service.dart';
import 'services/saved_searches_store.dart';
import 'services/sharing_switch.dart';
import 'services/social_account_store.dart';
import 'services/social_connection.dart';
import 'services/social_service.dart';
import 'services/social_settings.dart';
import 'services/sync_service.dart';
import 'ui/theme.dart';
/// Boots the app WITHOUT blocking the first frame: paints a splash immediately,
/// then wires the encrypted DB + services and swaps in [TaneApp] once ready.
///
/// Before this, `main` awaited the whole of `configureDependencies()` (open the
/// encrypted DB, derive the social key, seed/scan the species catalog…) before
/// the first `runApp`, so nothing painted until init finished — the startup jank
/// visible as skipped frames. Now `main` runs `runApp` immediately with this
/// widget; the heavy work runs while the splash is already on screen.
class Bootstrap extends StatefulWidget {
const Bootstrap({super.key});
@override
State<Bootstrap> createState() => _BootstrapState();
}
class _BootstrapState extends State<Bootstrap> {
late Future<TaneApp> _app = _boot();
Future<TaneApp> _boot() async {
await configureDependencies();
// Detect camera presence once, before the home screen builds, so camera-less
// devices (Chromebooks, Automotive, some TVs) hide the QR scan / camera UI
// instead of offering broken actions. Non-Android platforms keep the default.
await initCameraAvailability();
// The saved language lives in the keystore, so it can only be applied once
// DI is up. Until now the splash showed in the device language (it has no
// text), so there is no visible flip.
final savedLocale = await getIt<LocaleStore>().saved();
if (savedLocale != null) LocaleSettings.setLocaleSync(savedLocale);
final onboarding = getIt<OnboardingStore>();
final connection = getIt.isRegistered<SocialConnection>()
? getIt<SocialConnection>()
: null;
final inbox =
getIt.isRegistered<InboxService>() ? getIt<InboxService>() : null;
final notifications = getIt.isRegistered<NotificationService>()
? getIt<NotificationService>()
: null;
// Ask for notification permission and set up the OS channel (no-op on
// unsupported platforms). Done before the inbox starts listening.
if (notifications != null) await notifications.initialize();
final sync =
getIt.isRegistered<SyncService>() ? getIt<SyncService>() : null;
final plantares =
getIt.isRegistered<PlantareService>() ? getIt<PlantareService>() : null;
final savedSearchAlerts = getIt.isRegistered<SavedSearchAlertService>()
? getIt<SavedSearchAlertService>()
: null;
// Sharing is opt-in: the app must not touch the network until the person
// has joined the sharing side. An install from before this setting keeps
// whatever it had (see `migrateSharingEnabled`) so nobody silently loses
// messaging on upgrade.
final introSeen = await onboarding.introSeen();
final sharingOn = await getIt<SocialSettings>().migrateSharingEnabled(
introSeen: introSeen,
);
// Subscribe the inbox + sync + plantaré + saved-search listeners BEFORE the
// shared connection starts connecting, so the first session is caught; then
// bring the connection up. The listeners are harmless while sharing is off:
// they only ever react to a session, and none arrives.
inbox?.start();
sync?.start();
plantares?.start();
savedSearchAlerts?.start();
if (sharingOn) connection?.start();
return TaneApp(
repository: getIt<VarietyRepository>(),
species: getIt<SpeciesRepository>(),
onboarding: onboarding,
social:
getIt.isRegistered<SocialService>() ? getIt<SocialService>() : null,
socialSettings: getIt<SocialSettings>(),
connection: connection,
location: const NativeCoarseLocation(),
outbox: getIt<OfferOutbox>(),
messageStore: getIt<MessageStore>(),
profileStore: getIt<ProfileStore>(),
profileCache: getIt<ProfileCache>(),
savedOffers: getIt<SavedOffersStore>(),
savedSearches: getIt<SavedSearchesStore>(),
socialAccounts: getIt<SocialAccountStore>(),
inbox: inbox,
notifications: notifications,
showIntro: !introSeen,
sharing: SharingSwitch(
settings: getIt<SocialSettings>(),
connection: connection,
enabled: sharingOn,
),
autoBackup: getIt.isRegistered<AutoBackupService>()
? getIt<AutoBackupService>()
: null,
);
}
// `configureDependencies` is idempotent (and self-heals a half-wired
// container), so retrying after a failed boot is safe.
void _retry() => setState(() => _app = _boot());
@override
Widget build(BuildContext context) {
return FutureBuilder<TaneApp>(
future: _app,
builder: (context, snapshot) {
if (snapshot.hasData) return snapshot.data!;
return BootstrapSplash(
error: snapshot.hasError,
onRetry: snapshot.hasError ? _retry : null,
);
},
);
}
}
/// The pre-init frame. A minimal [MaterialApp] so its text has a
/// `Directionality`, theme and localizations. Its background matches the native
/// splash colour ([seedGreen]) for a seamless handoff — one continuous green
/// screen from launch until the app is ready. Shows a spinner while booting and,
/// on [error], the failure message with a [onRetry] action.
class BootstrapSplash extends StatelessWidget {
const BootstrapSplash({required this.error, this.onRetry, super.key});
final bool error;
final VoidCallback? onRetry;
@override
Widget build(BuildContext context) {
return MaterialApp(
debugShowCheckedModeBanner: false,
theme: buildTaneTheme(),
// Asturian (`ast`) has no bundled Material/Cupertino localizations, so map
// it to Spanish for the framework chrome — same as the main app (app.dart).
locale: materialLocaleFor(TranslationProvider.of(context).flutterLocale),
supportedLocales: AppLocaleUtils.supportedLocales,
localizationsDelegates: const [
GlobalMaterialLocalizations.delegate,
GlobalWidgetsLocalizations.delegate,
GlobalCupertinoLocalizations.delegate,
],
home: Scaffold(
backgroundColor: seedGreen,
body: Center(
child: Column(
mainAxisSize: MainAxisSize.min,
children: [
Image.asset('assets/logo.png', width: 120, height: 120),
const SizedBox(height: 32),
if (error) ...[
Padding(
padding: const EdgeInsets.symmetric(horizontal: 32),
child: Text(
context.t.bootstrap.failed,
textAlign: TextAlign.center,
style: const TextStyle(color: Colors.white, fontSize: 16),
),
),
const SizedBox(height: 16),
if (onRetry != null)
FilledButton(
onPressed: onRetry,
style: FilledButton.styleFrom(
backgroundColor: Colors.white,
foregroundColor: seedGreen,
),
child: Text(context.t.bootstrap.retry),
),
] else
const SizedBox(
width: 28,
height: 28,
child: CircularProgressIndicator(
strokeWidth: 3,
valueColor: AlwaysStoppedAnimation(Colors.white),
),
),
],
),
),
),
);
}
}