feat(crypto): drive matrix-js-sdk crypto from a Rust OlmMachine over IPC

.changeset/embedded-unifiedpush-distributor.md

@@ -0,0 +1,5 @@
+---
+default: minor
+---
+
+Add a built-in UnifiedPush distributor so Android push works without Google Play Services or a separate distributor app, support MSC4174 so the homeserver can deliver web push directly, and decrypt push previews through the Rust crypto engine.

.github/workflows/rust-quality.yml

@@ -78,10 +78,10 @@ jobs:
           save-if: ${{ github.ref == 'refs/heads/dev' }}
 
       - name: Check native app
-        run: cargo check --locked --manifest-path src-tauri/Cargo.toml
+        run: cargo check --locked --manifest-path src-tauri/Cargo.toml --features matrix-crypto
 
       - name: Run Rust tests
-        run: cargo test --locked --manifest-path src-tauri/Cargo.toml
+        run: cargo test --locked --manifest-path src-tauri/Cargo.toml --features matrix-crypto
 
       - name: Run Clippy
-        run: cargo clippy --locked --manifest-path src-tauri/Cargo.toml --all-targets -- -D warnings
+        run: cargo clippy --locked --manifest-path src-tauri/Cargo.toml --all-targets --features matrix-crypto -- -D warnings

.github/workflows/tauri-build.yml

@@ -170,7 +170,7 @@ jobs:
 
       - name: Build desktop bundles
         shell: bash
-        run: pnpm tauri build ${{ matrix.args }} $TAURI_BUILD_ARGS
+        run: pnpm tauri:wry build ${{ matrix.args }} $TAURI_BUILD_ARGS
 
       - name: Normalize desktop artifact names
         shell: bash
@@ -313,7 +313,7 @@ jobs:
           if [ "$IS_NIGHTLY" = "true" ]; then
             export SABLE_BUILD_FLAVOR=dev
           fi
-          pnpm tauri android build --apk --aab --target aarch64 armv7
+          pnpm tauri android build --apk --aab --target aarch64 armv7 -- --features matrix-crypto
           OUT='src-tauri/gen/android/app/build/outputs'
           APK=$(find "$OUT/apk/universal/release" -name '*.apk' -type f | head -1)
           AAB=$(find "$OUT/bundle/universalRelease" -name '*.aab' -type f | head -1)
@@ -443,7 +443,7 @@ jobs:
           if [ "$IS_NIGHTLY" = "true" ]; then
             export SABLE_BUILD_FLAVOR=dev
           fi
-          pnpm tauri ios build --no-sign --ci
+          pnpm tauri ios build --no-sign --ci -- --features matrix-crypto
           IPA=$(find src-tauri/gen/apple/build -name '*.ipa' -type f | head -1)
           [ -n "$IPA" ] || { echo "IPA not found"; ls -R src-tauri/gen/apple/build 2>/dev/null || true; exit 1; }
           NORMALIZED_IPA="$(dirname "$IPA")/Sable-${VERSION}-ios-arm64.ipa"

knip.json

@@ -7,12 +7,7 @@
     "type": true
   },
   "ignoreFiles": ["src/app/generated/**/*"],
-  "ignoreDependencies": [
-    "buffer",
-    "@sableclient/sable-call-embedded",
-    "@matrix-org/matrix-sdk-crypto-wasm",
-    "@sableclient/twemoji-font"
-  ],
+  "ignoreDependencies": ["buffer", "@sableclient/sable-call-embedded", "@sableclient/twemoji-font"],
   "ignoreBinaries": ["knope", "mise"],
   "rules": {
     "exports": "off",

package.json

@@ -51,11 +51,12 @@
     "@livekit/components-react": "2.9.23",
     "@lottiefiles/dotlottie-react": "^0.19.14",
     "@lottiefiles/dotlottie-web": "0.79.1",
+    "@matrix-org/matrix-sdk-crypto-wasm": "^18.3.1",
     "@noble/hashes": "^2.3.0",
     "@phosphor-icons/react": "^2.1.10",
     "@sableclient/matrixrtc": "^0.1.0",
     "@sableclient/tauri-plugin-livekit-mobile": "^0.2.0",
-    "@sableclient/tauri-plugin-notifications-api": "^0.5.0",
+    "@sableclient/tauri-plugin-notifications-api": "^0.5.3",
     "@sableclient/twemoji-font": "^1.0.4",
     "@sentry/react": "^10.70.0",
     "@tanstack/react-query": "^5.101.4",
@@ -181,4 +182,4 @@
     }
   },
   "packageManager": "pnpm@10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be"
-}
+}

scripts/tauri.js

@@ -71,7 +71,8 @@ async function main() {
   // The frontend is built before Cargo, so mirror the updater feature into Vite.
   process.env.VITE_DESKTOP_UPDATER_ENABLED = String(!noUpdater);
 
-  const features = noUpdater ? platform : `${platform},updater`;
+  const base = noUpdater ? platform : `${platform},updater`;
+  const features = `${base},matrix-crypto`;
   const args = [cmd, '--features', features, ...tauriArgs];
   if (!tauriArgs.includes('--')) {
     args.push('--');