7.1.0

.github/workflows/desktop-build.yml

@@ -164,6 +164,7 @@ jobs:
         uses: ./.github/actions/setup-env
         with:
           bootstrap-packages: "@quiet/eslint-config,@quiet/logger,@quiet/common,@quiet/types,@quiet/state-manager,@quiet/backend,@quiet/identity,@quiet/desktop,backend-bundle,helia,@quiet/node-common"
+          envfile: ${{ github.event.release.prerelease && '.env.staging' || '.env.production' }}
 
       - name: Install libfuse
         run: sudo apt install libfuse2
@@ -252,6 +253,7 @@ jobs:
         uses: ./.github/actions/setup-env
         with:
           bootstrap-packages: "@quiet/eslint-config,@quiet/logger,@quiet/common,@quiet/types,@quiet/state-manager,@quiet/backend,@quiet/identity,@quiet/desktop,backend-bundle,helia,@quiet/node-common"
+          envfile: ${{ github.event.release.prerelease && '.env.staging' || '.env.production' }}
 
       - name: Before build
         uses: ./.github/actions/before-build
@@ -301,7 +303,7 @@ jobs:
           version: ${{ steps.extract_version.outputs.version }}
           status: ${{ job.status }}
           slack_oauth_token: ${{ secrets.SLACK_BOT_OAUTH_TOKEN }}
-  
+
   build-macos-arm64-prod:
     runs-on: macos-26
     if: |
@@ -332,6 +334,7 @@ jobs:
         uses: ./.github/actions/setup-env
         with:
           bootstrap-packages: "@quiet/eslint-config,@quiet/logger,@quiet/common,@quiet/types,@quiet/state-manager,@quiet/backend,@quiet/identity,@quiet/desktop,backend-bundle,helia,@quiet/node-common"
+          envfile: ${{ github.event.release.prerelease && '.env.staging' || '.env.production' }}
 
       - name: Before build
         uses: ./.github/actions/before-build

.github/workflows/mobile-deploy-ios.yml

@@ -86,6 +86,8 @@ jobs:
             -archivePath build/Quiet.xcarchive \
             CODE_SIGN_IDENTITY="Apple Distribution: A Quiet LLC (CTYKSWN9T4)" \
             ENABLE_BITCODE=NO
+        env:
+          ENVFILE: ${{ github.event.release.prerelease && '.env.staging' || '.env.production' }}
 
       - name: Export .ipa
         run: |

.gitignore

@@ -10,6 +10,7 @@ packages/.DS_Store
 *.log
 clangd/
 **/.claude/settings.local.json
+.claude/worktrees
 
 
 # Yarn
@@ -22,3 +23,4 @@ clangd/
 
 # Firebase
 GoogleService-Info.plist
+google-services.json

CHANGELOG.md

@@ -1,9 +1,11 @@
 # Changelog
 
-## [unreleased]
+## [7.1.0]
 
 ### Features
 
+* Adds ios push notification support [#3087](https://github.com/TryQuiet/quiet/issues/3087)
+
 ### Fixes
 
 ### Chores
@@ -34,7 +36,8 @@
 * Self-assign the member role when joining with QSS [#3058](https://github.com/TryQuiet/quiet/issues/3058)
 * Use LFA-based identity in OrbitDB
 * Requests iOS notification permissions when app launches [#3079](https://github.com/TryQuiet/quiet/issues/3079)
-* Adds push notification service [#3086](https://github.com/TryQuiet/quiet/issues/3086)
+* Store LFA keys in IOS keychain for notifications [#3091](https://github.com/TryQuiet/quiet/issues/3091)
+* Store user metadata in IOS native storage for notifications [#3091](https://github.com/TryQuiet/quiet/issues/3091)
 
 ## [6.6.2]
 

packages/backend/src/nest/auth/services/crypto/crypto.service.ts

@@ -14,9 +14,10 @@ import {
 import { ChainServiceBase } from '../chainServiceBase'
 import { SigChain } from '../../sigchain'
 import { asymmetric, Keyset, Member, SignedEnvelope, EncryptStreamTeamPayload } from '@localfirst/auth'
+import { KeyMap } from '@localfirst/auth/team/selectors'
 import { DEFAULT_SEARCH_OPTIONS, MemberSearchOptions } from '../members/types'
 import { createLogger } from '../../../common/logger'
-import { KeyMetadata } from '3rd-party/auth/packages/crdx/dist'
+import { KeyMetadata } from '@localfirst/crdx'
 
 const logger = createLogger('auth:cryptoService')
 
@@ -36,6 +37,22 @@ class CryptoService extends ChainServiceBase {
     })
   }
 
+  public getPublicKeysForAllMembers(includeSelf: boolean = false): Keyset[] {
+    const members = this.sigChain.users.getAllUsers()
+    const keysByMember = []
+    for (const member of members) {
+      if (member.userId === this.sigChain.context.user.userId && !includeSelf) {
+        continue
+      }
+      keysByMember.push(member.keys)
+    }
+    return keysByMember
+  }
+
+  public getAllKeys(): KeyMap {
+    return this.sigChain.team!.allKeys()
+  }
+
   public sign(message: any): SignedEnvelope {
     return this.sigChain.team!.sign(message)
   }
@@ -118,12 +135,10 @@ class CryptoService extends ChainServiceBase {
   ): DecryptedPayload<T> {
     let contents: T
     if (typeof encrypted.contents === 'string') {
-      logger.debug('Converting Base64 string to Buffer')
       encrypted.contents = Buffer.from(encrypted.contents, 'base64')
     }
     // Handle numeric array case (JSON-encoded Uint8Array)
     else if (Array.isArray(encrypted.contents)) {
-      logger.debug('Converting numeric array to Buffer')
       encrypted.contents = Buffer.from(encrypted.contents)
     }
     // Handle Node.js Buffer JSON representation ({"type":"Buffer","data":[...]})
@@ -133,12 +148,10 @@ class CryptoService extends ChainServiceBase {
       (encrypted.contents as any).type === 'Buffer' &&
       Array.isArray((encrypted.contents as any).data)
     ) {
-      logger.debug('Converting JSON Buffer representation to Buffer')
       encrypted.contents = Buffer.from((encrypted.contents as any).data)
     }
     // Handle object with numeric keys (parsed JSON representation)
     else if (encrypted.contents && typeof encrypted.contents === 'object' && !Buffer.isBuffer(encrypted.contents)) {
-      logger.debug('Converting object with numeric keys to Buffer')
       const nums = Object.keys(encrypted.contents)
         .filter(key => /^\d+$/.test(key))
         .map(key => (encrypted.contents as any)[key] as number)

packages/backend/src/nest/auth/sigchain.service.spec.ts

@@ -6,6 +6,9 @@ import { LocalDbService } from '../local-db/local-db.service'
 import { LocalDbModule } from '../local-db/local-db.module'
 import { TestModule } from '../common/test.module'
 import { SigChainModule } from './sigchain.service.module'
+import { SigChain } from './sigchain'
+import { SocketEvents } from '@quiet/types'
+import waitForExpect from 'wait-for-expect'
 
 const logger = createLogger('auth:sigchainManager.spec')
 
@@ -91,3 +94,101 @@ describe('SigChainService', () => {
     expect(sigChainService.getChain({ teamName: TEAM_NAME2 })).toBeDefined()
   })
 })
+
+describe('SigChainService - listener lifecycle', () => {
+  let module: TestingModule
+  let sigChainService: SigChainService
+  let localDbService: LocalDbService
+
+  beforeAll(async () => {
+    module = await Test.createTestingModule({
+      imports: [TestModule, SigChainModule, LocalDbModule],
+    }).compile()
+    sigChainService = await module.resolve(SigChainService)
+    localDbService = await module.resolve(LocalDbService)
+    await localDbService.open()
+  })
+
+  afterAll(async () => {
+    await localDbService.close()
+    await module.close()
+  })
+
+  it('does not accumulate listeners on chains when switching active chain', async () => {
+    const chainA: SigChain = await sigChainService.createChain('leakA', 'alice', true)
+    // chainA is active: one listener attached
+    expect(chainA.listenerCount('updated')).toBe(1)
+
+    const chainB: SigChain = await sigChainService.createChain('leakB', 'bob', true)
+    // Active switched A → B. detachSocketListeners(A) must have removed A's listener.
+    expect(chainA.listenerCount('updated')).toBe(0)
+    expect(chainB.listenerCount('updated')).toBe(1)
+
+    sigChainService.setActiveChain('leakA')
+    // Active switched B → A. detachSocketListeners(B) must have removed B's listener,
+    // and attachSocketListeners(A) adds exactly one to A.
+    expect(chainA.listenerCount('updated')).toBe(1)
+    expect(chainB.listenerCount('updated')).toBe(0)
+  })
+
+  it('does not emit iOS-native key or device events on non-ios platforms', async () => {
+    const emitSpy = jest.spyOn(sigChainService.serverIoProvider.io, 'emit')
+
+    await sigChainService.createChain('desktopOnly', 'alice', true)
+
+    expect(emitSpy.mock.calls.filter(([event]) => event === SocketEvents.KEYS_UPDATED)).toHaveLength(0)
+    expect(emitSpy.mock.calls.filter(([event]) => event === SocketEvents.DEVICE_CREDENTIALS_UPDATED)).toHaveLength(0)
+  })
+
+  it('emits new keys to iOS once and does not resend already-stored keys', async () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { value: 'ios' })
+
+    try {
+      const emitSpy = jest.spyOn(sigChainService.serverIoProvider.io, 'emit')
+      const chain = await sigChainService.createChain('iosKeys', 'alice', true)
+      const teamId = chain.team!.id
+
+      await waitForExpect(async () => {
+        const keyCalls = emitSpy.mock.calls.filter(([event]) => event === SocketEvents.KEYS_UPDATED)
+        expect(keyCalls).toHaveLength(1)
+        expect((keyCalls[0][1] as { keys: unknown[] }).keys.length).toBeGreaterThan(0)
+        const storedKeys = await localDbService.getKeysStoredInKeychain(teamId)
+        expect(storedKeys).toHaveLength((keyCalls[0][1] as { keys: unknown[] }).keys.length)
+      })
+
+      const storedKeysAfterFirstUpdate = await localDbService.getKeysStoredInKeychain(teamId)
+
+      chain.emit('updated')
+
+      await new Promise(resolve => setTimeout(resolve, 25))
+
+      expect(emitSpy.mock.calls.filter(([event]) => event === SocketEvents.KEYS_UPDATED)).toHaveLength(1)
+      expect(await localDbService.getKeysStoredInKeychain(teamId)).toEqual(storedKeysAfterFirstUpdate)
+    } finally {
+      Object.defineProperty(process, 'platform', { value: originalPlatform })
+    }
+  })
+
+  it('emits device credentials for the NSE on ios', async () => {
+    const originalPlatform = process.platform
+    Object.defineProperty(process, 'platform', { value: 'ios' })
+
+    try {
+      const emitSpy = jest.spyOn(sigChainService.serverIoProvider.io, 'emit')
+      const chain = await sigChainService.createChain('iosDeviceCredentials', 'alice', true)
+
+      await waitForExpect(() => {
+        const deviceCalls = emitSpy.mock.calls.filter(([event]) => event === SocketEvents.DEVICE_CREDENTIALS_UPDATED)
+        expect(deviceCalls).toHaveLength(1)
+        expect(deviceCalls[0][1]).toEqual({
+          deviceId: chain.device.deviceId,
+          teamId: chain.team!.id,
+          signingPrivateKey: chain.device.keys.signature.secretKey,
+        })
+      })
+    } finally {
+      Object.defineProperty(process, 'platform', { value: originalPlatform })
+    }
+  })
+})