Files
buzz/mobile/lib/shared/share/pending_share.dart
Tom Brow 2b428f56b8 feat(mobile): share into Buzz from the iOS share sheet (#9433)
Lets people share screenshots, screen recordings, photos, URLs and text
from any iOS app into Buzz. Today Buzz doesn't appear in the share sheet
at all.

- **Plain Buzz icon:** opens a new Solo chat with the items in its
composer.
- **Suggested conversation:** iOS offers channels and DMs the person
recently sent top-level messages in. Choosing one opens that
conversation with the items in its composer. When the conversation is
already open, the share goes to that page's composer instead of opening
a second one; if another page covers it, Buzz stays where it is and
shows "Go back to that conversation to finish sharing", and the items
join the draft when the person goes back.
- The share extension has no UI and sends nothing. It copies the items
into the app group and opens Buzz, which prefills the normal composer,
so drafts, attachments, mentions and failed-send handling all stay the
app's (see [the
ADR](https://github.com/block/buzz/blob/mobile-share-extension-design/docs/adr/0003-share-hands-off-to-the-conversation.md)).
- If the conversation already has a draft, Buzz asks whether to add the
shared items to it or replace it.
- A share to a conversation that's no longer available (a removed
community or channel, or an unreadable share) shows "That conversation
isn't available". A share while signed out shows "Sign in to share".

Suggestions come from an outgoing `INSendMessageIntent` the app donates
after a top-level send or a new Solo chat. The notification extension no
longer donates incoming messages, so receiving a message never makes a
conversation a suggestion; it still turns the push into a communication
notification with the sender's avatar. Both use the same conversation
identifier, now the plain community and channel IDs instead of a hash,
because the extension needs to hand the identifier back to the app.

| Before | After |
| --- | --- |
| <img alt="Share sheet without Buzz"
src="https://github.com/user-attachments/assets/452fac1b-7e87-44c3-a442-099f78d0e07b"
width="300"> | <img alt="Share sheet with Buzz"
src="https://github.com/user-attachments/assets/54b9775d-29b4-49a5-8ab9-5fda8718a02f"
width="300"> |

| Buzz icon: new Solo chat | Suggested DM with a draft | After Add |
| --- | --- | --- |
| <img alt="New Solo chat with the shared photo"
src="https://github.com/user-attachments/assets/c5da4d8b-1dd8-4e30-9e92-9dba515b3623"
width="250"> | <img alt="Add to your draft prompt"
src="https://github.com/user-attachments/assets/2f879f8a-3b9f-48e0-b963-2828e90dc9fe"
width="250"> | <img alt="Draft with the shared link and photo added"
src="https://github.com/user-attachments/assets/12832006-85c5-4447-98b5-62932552c931"
width="250"> |


https://github.com/user-attachments/assets/b9d380fa-e802-4ed7-89a8-592a03784c8f

### Regressions

- Nothing changes for people who never use the share sheet, except that
sending a top-level message or starting a Solo chat now makes one local
`INInteraction.donate` call (skipped while the age restriction is on,
which still purges every interaction).
- Communication notifications look the same. Dropping the incoming
donation removes work (and a deletion fence) from the notification
extension's time budget.
- The share hand-off reuses the existing deep link dispatcher. A share
link is a new link type; notification and message links take the same
paths as before.

### Validation

- Added tests:
- Dispatcher hand-off: a share to a suggested channel opens it with the
shared text and files; shares to a removed community, an unlisted
channel, an unknown manifest version or a missing manifest show the
error and delete the pending share; share links accept only the
extension's UUID ids.
- Composer delivery: with an existing draft, Add appends the shared text
on a new line and attaches the file, Replace clears the draft first, and
the app group copy is deleted either way.
- Notification presenter: specializes the notification from the intent,
or falls back to the ordinary content when that throws (replaces the
donation and deletion-fence tests).
- Full mobile Flutter suite and BuzzPushKit Swift tests pass.
- Automated app run on an iPhone 17 Pro simulator (iOS 27, dev relay
test community), recorded above: sent a DM, shared a photo from Photos
with the Buzz icon from a cold start (new Solo chat with the photo
attached), then handed a link and photo to a DM that had a draft and
chose Add. Also checked that a share's pending files are deleted after
delivery.
- Limitation: the iOS simulator never shows share-sheet conversation
suggestions (it has no `coreduetd`), so the suggested-DM step in the
video is staged by writing the same pending share and link the extension
writes. Choosing a real suggestion still needs a check on a device.
- Known gaps, all confined to sharing: suggestions have no avatar image
yet; a suggestion for a conversation left after signing out shows "isn't
available"; choosing Later in the unfinished-chat dialog keeps the share
until the next new chat; and a pending share the app never receives (for
example when Buzz doesn't open) stays in the app group.

### Before merge

- [x] On a real iPhone, choose a suggested conversation in the share
sheet and confirm the shared items open in that conversation's composer
(the simulator can't show suggestions). Waived before merge: the managed
test iPhone shows no share-sheet suggestions for any app, so this will
be checked on a personal phone after landing.

---------

Signed-off-by: Tom Brow <tomb@squareup.com>
Co-authored-by: Tom Brow <tomb@squareup.com>
2026-11-12 22:57:21 -08:00

169 lines
5.7 KiB
Dart

import 'dart:async';
import 'dart:convert';
import 'dart:io';
import 'package:flutter/services.dart';
import 'package:hooks_riverpod/hooks_riverpod.dart';
const _appGroupChannel = MethodChannel('buzz/app_group');
/// The conversation identifier Buzz donates to iOS for share suggestions.
///
/// iOS hands it back to the share extension when the person picks that
/// suggestion. It carries the real device-local community ID and channel ID
/// and must match `BuzzPushPresentationIdentity.conversation` in BuzzPushKit.
String shareConversationIdentifier({
required String communityId,
required String channelId,
}) => jsonEncode([communityId, channelId]);
/// A conversation named by [shareConversationIdentifier].
typedef ShareTarget = ({String communityId, String channelId});
/// Items the share extension left for the app, and where they go.
class PendingShare {
const PendingShare({
required this.id,
required this.target,
required this.text,
required this.files,
this.missed = 0,
});
final String id;
/// The suggested conversation the person picked, or null for the plain
/// Buzz icon, which starts a new Solo chat.
final ShareTarget? target;
/// Shared URLs and text, in share-sheet order.
final List<String> text;
/// Paths of the shared images and videos copied into the app group.
final List<String> files;
/// Shared items the extension couldn't load or copy, so they are absent
/// from [text] and [files].
final int missed;
/// The composer text the share adds: each URL or text item on its own line.
String get composerText => text.join('\n');
}
/// Thrown when a pending share is missing or its manifest is malformed.
class PendingShareUnavailable implements Exception {
const PendingShareUnavailable(this.message);
final String message;
@override
String toString() => 'PendingShareUnavailable: $message';
}
Future<Directory> _sharesDirectory() async {
final path = await _appGroupChannel.invokeMethod<String>(
'pendingSharesDirectory',
);
if (path == null) {
throw const PendingShareUnavailable('the app group is unavailable');
}
return Directory(path);
}
/// Reads the manifest the share extension wrote for [shareId].
Future<PendingShare> loadPendingShare(
String shareId, {
Future<Directory> Function() sharesDirectory = _sharesDirectory,
}) async {
final directory = Directory('${(await sharesDirectory()).path}/$shareId');
final manifest = File('${directory.path}/share.json');
if (!await manifest.exists()) {
throw PendingShareUnavailable('share $shareId has no manifest');
}
final json = jsonDecode(await manifest.readAsString());
if (json is! Map || json['version'] != 1) {
throw PendingShareUnavailable('share $shareId has an unknown manifest');
}
final text = json['text'];
final files = json['files'];
final target = json['target'];
final missed = json['missed'] ?? 0;
if (text is! List ||
files is! List ||
missed is! int ||
(target != null && target is! String)) {
throw PendingShareUnavailable('share $shareId has a malformed manifest');
}
return PendingShare(
id: shareId,
target: target == null ? null : parseShareConversationIdentifier(target),
text: [for (final item in text) item as String],
files: [for (final name in files) '${directory.path}/${_fileName(name)}'],
missed: missed,
);
}
String _fileName(Object? name) {
if (name is! String || name.isEmpty || name.contains('/') || name == '..') {
throw PendingShareUnavailable('invalid shared file name $name');
}
return name;
}
/// Parses an identifier iOS handed back. A target the app never donated
/// fails, so the caller reports that conversation as unavailable.
ShareTarget parseShareConversationIdentifier(String identifier) {
final decoded = jsonDecode(identifier);
if (decoded is List &&
decoded.length == 2 &&
decoded[0] is String &&
decoded[1] is String) {
return (communityId: decoded[0] as String, channelId: decoded[1] as String);
}
throw PendingShareUnavailable('unrecognized share target $identifier');
}
/// Deletes the share's copied items once the composer holds them.
Future<void> deletePendingShare(
String shareId, {
Future<Directory> Function() sharesDirectory = _sharesDirectory,
}) async {
final directory = Directory('${(await sharesDirectory()).path}/$shareId');
if (await directory.exists()) await directory.delete(recursive: true);
}
/// Shares waiting for a composer to open, keyed by compose draft key, oldest
/// first.
///
/// The dispatcher delivers a share here and then opens its conversation; that
/// conversation's composer takes each in turn and adds the items to its draft.
/// Shares queue rather than replace each other, since a conversation covered
/// by another page takes its shares only once it is back on screen.
class ComposerShareInbox extends Notifier<Map<String, List<PendingShare>>> {
@override
Map<String, List<PendingShare>> build() => const {};
void deliver(String draftKey, PendingShare share) {
final waiting = state[draftKey] ?? const <PendingShare>[];
if (waiting.any((queued) => queued.id == share.id)) return;
state = {
...state,
draftKey: [...waiting, share],
};
}
/// Removes and returns the oldest share waiting for [draftKey], if any.
PendingShare? take(String draftKey) {
final waiting = state[draftKey];
if (waiting == null || waiting.isEmpty) return null;
final rest = waiting.sublist(1);
state = {...state}
..remove(draftKey)
..addAll({if (rest.isNotEmpty) draftKey: rest});
return waiting.first;
}
}
final composerShareInboxProvider =
NotifierProvider<ComposerShareInbox, Map<String, List<PendingShare>>>(
ComposerShareInbox.new,
);