@poolse/react-native-calls 0.1.3 → 0.2.0

package/android/build.gradle

@@ -28,6 +28,8 @@ android {
     targetSdkVersion safeExtGet("targetSdkVersion", 36)
     versionCode 1
     versionName "0.1.0"
+    // Keeps the reflectively-loaded LiveKit adapter in minified apps.
+    consumerProguardFiles "consumer-rules.pro"
   }
 
   if (useLiveKit) {
@@ -48,4 +50,9 @@ dependencies {
   if (useLiveKit) {
     implementation 'io.livekit:livekit-android:2.11.0'
   }
+
+  // JVM unit tests (CallHttpClient's parser). The real org.json replaces
+  // android.jar's throwing stubs on the test classpath.
+  testImplementation 'junit:junit:4.13.2'
+  testImplementation 'org.json:json:20180813'
 }

package/android/consumer-rules.pro

@@ -0,0 +1,11 @@
+# Applied to the HOST app's minified release build.
+
+# CallCore loads the LiveKit MediaPort reflectively
+# (Class.forName("dev.poolse.callcore.livekit.LiveKitMediaPort") and its
+# Companion.getFactory), so R8 cannot see the reference: keep it whole.
+-keep class dev.poolse.callcore.livekit.** { *; }
+
+# The core's entry points are named in the manifest / by the Expo
+# module registry; keep them (and their companions) un-renamed too.
+-keep class dev.poolse.callcore.android.** { *; }
+-keep class expo.modules.poolsecalls.** { *; }

package/android/src/main/AndroidManifest.xml

@@ -9,6 +9,8 @@
   <uses-permission android:name="android.permission.RECORD_AUDIO" />
   <uses-permission android:name="android.permission.VIBRATE" />
   <uses-permission android:name="android.permission.WAKE_LOCK" />
+  <!-- Android 14: a phoneCall-type foreground service requires it. -->
+  <uses-permission android:name="android.permission.MANAGE_OWN_CALLS" />
 
   <application>
     <activity

package/android/src/main/java/dev/poolse/callcore/CallCoreRuntime.kt

@@ -7,12 +7,19 @@ package dev.poolse.callcore
  *
  * The machine decides; this class merely obeys — there is deliberately
  * no call logic here beyond bookkeeping the effects need (which grant
- * answers which call, which control token hangs up). If behavior is
- * wrong, the fix is in CallMachine + vectors, not here.
+ * answers which call, which control token hangs up, which HTTP answer
+ * belongs to which call). If behavior is wrong, the fix is in
+ * CallMachine + vectors, not here.
  *
- * Thread-safe: adapters may call in from any thread; dispatch is
- * serialized on an internal lock. The Android bridge hops results back
- * to its own looper via TimerPort's scheduling.
+ * Threading: ONE serial queue, no lock. Every input — FCM, binder taps,
+ * OkHttp callbacks, SFU events, timers, JS commands — is [post]ed onto
+ * [executor] (on Android the main looper). The previous lock let a port
+ * that answered synchronously re-enter `dispatch` mid-effect-list, so
+ * a later effect ran against a state the earlier one had already moved
+ * on. Now a result produced while effects execute is QUEUED behind the
+ * current dispatch, never run inside it, and each dispatch emits its
+ * snapshot only after its last effect. Tests pass a direct executor;
+ * the internal trampoline gives them the same ordering.
  */
 class CallCoreRuntime(
   private val http: HttpPort,
@@ -21,10 +28,14 @@ class CallCoreRuntime(
   private val session: CallSessionPort,
   private val timers: TimerPort,
   private val sink: SnapshotSink,
+  /** Runs a task on the single runtime thread. Must be serial. */
+  private val executor: (Runnable) -> Unit = { it.run() },
+  /** Where a crashing task is reported; the queue keeps draining regardless. */
+  private val onError: (Throwable) -> Unit = {},
 ) {
-  private val lock = Any()
-
-  private var state: MachineState = MachineState.IDLE
+  // Read from any thread (the bridge's getCallState); written only on
+  // the runtime thread.
+  @Volatile private var state: MachineState = MachineState.IDLE
 
   /** The ring being shown (its grant answers/declines it). */
   private var ring: RingContext? = null
@@ -38,92 +49,182 @@ class CallCoreRuntime(
   /** The session token place/join were called with, for one retry. */
   private var sessionToken: String? = null
 
-  private companion object {
+  /**
+   * Call generation: bumped whenever a call starts CONNECTING and
+   * whenever one ends. HTTP callbacks and timers capture it, so a late
+   * answer/place response or timer of a call that already ended can
+   * never be adopted by — or end — the next one.
+   */
+  private var gen = 0
+
+  /**
+   * callIds already resolved on this device (ended, declined, timed
+   * out, rung-off remotely, busy-declined). Push + socket + FCM's own
+   * redelivery can hand us the same ring several times, sometimes after
+   * the call is over; a bounded LRU drops those instead of re-ringing.
+   */
+  private val resolved = object : LinkedHashMap<String, Unit>(RESOLVED_LRU, 0.75f, true) {
+    override fun removeEldestEntry(eldest: MutableMap.MutableEntry<String, Unit>?) = size > RESOLVED_LRU
+  }
+
+  // ── serial queue ────────────────────────────────────────────────────
+
+  private val queue = ArrayDeque<() -> Unit>()
+  private var draining = false
+
+  /** Run [block] on the runtime thread, after anything already queued. */
+  fun post(block: () -> Unit) {
+    executor(Runnable { enqueue(block) })
+  }
+
+  private fun enqueue(block: () -> Unit) {
+    queue.addLast(block)
+    if (draining) return // a dispatch is executing: run after it, not inside it
+    draining = true
+    try {
+      while (queue.isNotEmpty()) {
+        val next = queue.removeFirst()
+        try { next() } catch (t: Throwable) { onError(t) }
+      }
+    } finally {
+      draining = false
+    }
+  }
+
+  companion object {
     const val ENDED_LINGER_MS = 2_500L
     const val RECONNECT_BUDGET_MS = 25_000L
-    const val T_DEADLINE = "ring_deadline"
-    const val T_LINGER = "linger"
-    const val T_RECONNECT = "reconnect_budget"
+    /** CONNECTING watchdog: two HTTP attempts plus an SFU connect fit inside. */
+    const val CONNECT_WATCHDOG_MS = 20_000L
+    /** Caller-side backstop if the server's finish/no-answer never arrives. */
+    const val RING_OUT_BACKSTOP_MS = 75_000L
+    /**
+     * Device clocks drift; the deadline is server epoch. A ring this
+     * close past its deadline still shows (for at least this long) —
+     * the server's ring_ended(timeout) is the real cut-off.
+     */
+    const val CLOCK_SLACK_MS = 10_000L
+    const val RESOLVED_LRU = 32
+    private const val T_DEADLINE = "ring_deadline"
+    private const val T_LINGER = "linger"
+    private const val T_RECONNECT = "reconnect_budget"
+    private const val T_CONNECT = "connect_watchdog"
+    private const val T_RING_OUT = "ring_out_backstop"
   }
 
   // ── inputs from adapters ────────────────────────────────────────────
 
-  fun currentState(): MachineState = synchronized(lock) { state }
+  fun currentState(): MachineState = state
+
+  /** Best name for the current call: the server's bundle, else the ring's. Runtime thread only. */
+  val conversationName: String? get() = bundle?.conversationName ?: ring?.conversationName
+
+  /** True if [callId] was already resolved here — its ring must never surface again. */
+  fun isResolved(callId: String): Boolean = synchronized(resolved) { resolved.containsKey(callId) }
+
+  private fun markResolved(callId: String?) {
+    if (callId == null || callId.startsWith("pending:")) return
+    synchronized(resolved) { resolved[callId] = Unit }
+  }
 
   /** A ring arrived — push or socket, the machine treats them alike. */
-  fun onRing(ctx: RingContext) {
-    val stale = ctx.ringDeadlineEpochMs <= timers.nowMs()
-    synchronized(lock) {
-      // Remember the context BEFORE dispatch: the effects need it —
-      // SHOW_RING for this call, or HTTP_DECLINE_BUSY for another.
-      if (!stale) busyRings[ctx.callId] = ctx
-      dispatch(
-        Event.Ring(
-          callId = ctx.callId,
-          conversationId = ctx.conversationId,
-          media = ctx.media,
-          stale = stale,
-        ),
-        ringCtx = ctx,
-      )
-      busyRings.remove(ctx.callId)
-    }
+  fun onRing(ctx: RingContext) = post {
+    if (isResolved(ctx.callId)) return@post
+    // A late duplicate of the ring for the call we are already IN must
+    // not reach the machine: it would read as "another call while busy"
+    // and busy-decline our own call.
+    val s = state
+    if (s.callId == ctx.callId && s.phase != Phase.IDLE && s.phase != Phase.RINGING_IN) return@post
+
+    val stale = ctx.ringDeadlineEpochMs + CLOCK_SLACK_MS <= timers.nowMs()
+    // Remember the context BEFORE dispatch: the effects need it —
+    // SHOW_RING for this call, or HTTP_DECLINE_BUSY for another.
+    if (!stale) busyRings[ctx.callId] = ctx
+    dispatch(
+      Event.Ring(
+        callId = ctx.callId,
+        conversationId = ctx.conversationId,
+        media = ctx.media,
+        stale = stale,
+      ),
+      ringCtx = ctx,
+    )
+    busyRings.remove(ctx.callId)
   }
 
-  fun onRingEnded(callId: String, reason: String) =
-    synchronized(lock) { dispatch(Event.RingEnded(callId, reason)) }
+  fun onRingEnded(callId: String, reason: String) = post {
+    dispatch(Event.RingEnded(callId, reason))
+    markResolved(callId)
+  }
 
-  fun onCallFinished(callId: String) =
-    synchronized(lock) { dispatch(Event.CallFinished(callId)) }
+  fun onCallFinished(callId: String, reason: String? = null) = post {
+    dispatch(Event.CallFinished(callId, reason))
+    markResolved(callId)
+  }
 
-  fun answer() = synchronized(lock) { dispatch(Event.UserAnswer) }
-  fun decline() = synchronized(lock) { dispatch(Event.UserDecline) }
-  fun hangUp() = synchronized(lock) { dispatch(Event.UserHangup) }
+  fun answer() = post { dispatch(Event.UserAnswer) }
+  fun decline() = post { dispatch(Event.UserDecline) }
+  fun hangUp() = post { dispatch(Event.UserHangup) }
 
-  fun place(conversationId: String, media: String, sessionToken: String) =
-    synchronized(lock) {
-      this.sessionToken = sessionToken
-      // call_id is server-minted on place; a placeholder keys the state
-      // until the bundle arrives.
-      dispatch(Event.UserPlace(callId = "pending:$conversationId", conversationId = conversationId, media = media))
-    }
+  fun place(conversationId: String, media: String, sessionToken: String) = post {
+    if (state.phase != Phase.IDLE && state.phase != Phase.ENDED) return@post
+    this.sessionToken = sessionToken
+    // call_id is server-minted on place; a placeholder keys the state
+    // until the bundle arrives.
+    dispatch(Event.UserPlace(callId = "pending:$conversationId", conversationId = conversationId, media = media))
+  }
 
-  fun join(callId: String, conversationId: String?, sessionToken: String) =
-    synchronized(lock) {
-      this.sessionToken = sessionToken
-      dispatch(Event.UserJoin(callId, conversationId))
-    }
+  fun join(callId: String, conversationId: String?, sessionToken: String) = post {
+    if (state.phase != Phase.IDLE && state.phase != Phase.ENDED) return@post
+    this.sessionToken = sessionToken
+    dispatch(Event.UserJoin(callId, conversationId))
+  }
 
   /** Caller-side: the bridge resolved every ring from `ring_states`. */
-  fun allRingsResolved(outcome: String) =
-    synchronized(lock) { dispatch(Event.AllRingsResolved(outcome)) }
+  fun allRingsResolved(outcome: String) = post { dispatch(Event.AllRingsResolved(outcome)) }
 
-  fun onMediaConnected() = synchronized(lock) { dispatch(Event.MediaConnected) }
-  fun onMediaFailed() = synchronized(lock) { dispatch(Event.MediaFailed) }
-  fun onMediaLost() = synchronized(lock) { dispatch(Event.MediaLost) }
-  fun onMediaRecovered() = synchronized(lock) { dispatch(Event.MediaRecovered) }
-  fun onRemoteJoined() = synchronized(lock) { dispatch(Event.RemoteJoined) }
+  fun onMediaConnected() = post { dispatch(Event.MediaConnected) }
+  fun onMediaFailed() = post { dispatch(Event.MediaFailed) }
+  fun onMediaLost() = post { dispatch(Event.MediaLost) }
+  fun onMediaReconnecting() = post { dispatch(Event.MediaReconnecting) }
+  fun onMediaRecovered() = post { dispatch(Event.MediaRecovered) }
+  fun onRemoteJoined() = post { dispatch(Event.RemoteJoined) }
 
-  fun setMuted(muted: Boolean) = media.setMuted(muted)
-  fun setCamera(on: Boolean) = media.setCamera(on)
-  fun switchCamera() = media.switchCamera()
+  fun setMuted(muted: Boolean) = post { media.setMuted(muted) }
+  fun setCamera(on: Boolean) = post { media.setCamera(on) }
+  fun switchCamera() = post { media.switchCamera() }
+  fun setSpeaker(on: Boolean) = post { media.setSpeaker(on) }
+
+  /** Re-emit the current state (the bridge's roster/route changed). */
+  fun reemit() = post { if (state.phase != Phase.IDLE) sink.emit(state) }
 
   // ── dispatch ────────────────────────────────────────────────────────
 
+  private fun isTerminal(p: Phase) = p == Phase.IDLE || p == Phase.ENDED
+
   private fun dispatch(event: Event, ringCtx: RingContext? = null) {
     val before = state
     val (next, effects) = CallMachine.transition(before, event)
     state = next
+    // A new call attempt, or the end of one: old callbacks go stale.
+    if (next.phase == Phase.CONNECTING && before.phase != Phase.CONNECTING) gen++
+    if (isTerminal(next.phase) && !isTerminal(before.phase)) {
+      gen++
+      markResolved(before.callId)
+    }
     for (effect in effects) execute(effect, ringCtx)
     // Retire the ring grant only after EVERY effect has had its chance
     // to use it. CONNECTING keeps it (answer + the no-bundle hangup
     // fallback still need it); CallSessionStop clears it with the rest.
-    if (next.phase == Phase.IDLE || next.phase == Phase.ENDED) ring = null
+    if (isTerminal(next.phase)) ring = null
+    // A bundle never outlives its call — whatever ended it.
+    if (isTerminal(next.phase)) { bundle = null; sessionToken = null }
     runTimers(before, next)
     if (next != before || effects.isNotEmpty()) sink.emit(next)
   }
 
   private fun execute(effect: Effect, ringCtx: RingContext?) {
+    val g = gen
     when (effect) {
       Effect.ShowRing -> {
         ring = ringCtx
@@ -144,27 +245,28 @@ class CallCoreRuntime(
 
       Effect.HttpAnswer -> {
         val r = ring
-        if (r != null) http.answer(r.callId, r.grant, ::onHttpResult)
-        else onHttpResult(HttpResult.AuthFailed("no_grant"))
+        if (r != null) http.answer(r.callId, r.grant) { res -> post { onHttpResult(g, res) } }
+        else post { onHttpResult(g, HttpResult.AuthFailed("no_grant")) }
       }
       Effect.HttpJoin -> {
         val callId = state.callId
         val token = sessionToken
-        if (callId != null && token != null) http.join(callId, token, ::onHttpResult)
-        else onHttpResult(HttpResult.AuthFailed("no_session"))
+        if (callId != null && token != null) http.join(callId, token) { res -> post { onHttpResult(g, res) } }
+        else post { onHttpResult(g, HttpResult.AuthFailed("no_session")) }
       }
       Effect.HttpPlace -> {
         val conversationId = state.conversationId
         val token = sessionToken
         if (conversationId != null && token != null) {
-          http.place(conversationId, state.media, token, ::onHttpResult)
-        } else onHttpResult(HttpResult.AuthFailed("no_session"))
+          http.place(conversationId, state.media, token) { res -> post { onHttpResult(g, res) } }
+        } else post { onHttpResult(g, HttpResult.AuthFailed("no_session")) }
       }
       Effect.HttpDecline -> {
         ring?.let { http.decline(it.callId, it.grant, busy = false) }
       }
       is Effect.HttpDeclineBusy -> {
         busyRings[effect.callId]?.let { http.decline(it.callId, it.grant, busy = true) }
+        markResolved(effect.callId)
       }
       Effect.HttpHangup -> {
         val b = bundle
@@ -173,14 +275,15 @@ class CallCoreRuntime(
           b != null -> http.hangup(b.callId, b.controlToken)
           // Hanging up a connecting answer that has no bundle yet:
           // resolve the ring instead, so the caller is not left waiting.
+          // (The answer's late 2xx is hung up in onHttpResult.)
           r != null -> http.decline(r.callId, r.grant, busy = false)
           else -> Unit
         }
       }
       Effect.HttpReconnect -> {
         val b = bundle
-        if (b != null) http.reconnect(b.callId, b.controlToken, ::onReconnectResult)
-        else synchronized(lock) { dispatch(Event.HttpGone) }
+        if (b != null) http.reconnect(b) { res -> post { onReconnectResult(g, res) } }
+        else post { if (g == gen) dispatch(Event.HttpGone) }
       }
 
       Effect.MediaJoin -> bundle?.let(media::join)
@@ -196,62 +299,94 @@ class CallCoreRuntime(
     }
   }
 
-  private fun onHttpResult(result: HttpResult) {
-    synchronized(lock) {
-      when (result) {
-        is HttpResult.Ok -> {
-          bundle = result.bundle
-          // The server minted the real call id on place.
-          if (state.callId?.startsWith("pending:") == true) {
-            state = state.copy(callId = result.bundle.callId, conversationId = result.bundle.conversationId)
+  private fun onHttpResult(requestGen: Int, result: HttpResult) {
+    if (requestGen != gen) {
+      // The call this request belonged to is over (the user hung up
+      // while it was in flight). The server may still have let us in:
+      // leave, with the token it just gave us, and keep nothing.
+      if (result is HttpResult.Ok) http.hangup(result.bundle.callId, result.bundle.controlToken)
+      return
+    }
+    when (result) {
+      is HttpResult.Ok -> {
+        val existing = bundle
+        if (existing != null) {
+          // The timeout retry's twin answered too. Same call: ignore.
+          // Somehow a different one: we are not in it — leave it.
+          if (existing.callId != result.bundle.callId) {
+            http.hangup(result.bundle.callId, result.bundle.controlToken)
           }
-          dispatch(Event.HttpOk(created = result.bundle.created))
+          return
+        }
+        if (state.phase != Phase.CONNECTING) {
+          http.hangup(result.bundle.callId, result.bundle.controlToken)
+          return
         }
-        HttpResult.Gone -> dispatch(Event.HttpGone)
-        HttpResult.Timeout -> dispatch(Event.HttpTimeout)
-        is HttpResult.AuthFailed -> dispatch(Event.HttpGone)
+        bundle = result.bundle
+        // The server is the authority on the call's identity: the real
+        // id minted on place, and — for a join, which starts with only a
+        // call id and an "audio" default — its conversation and media.
+        // A video join left as "audio" took the earpiece wake lock, said
+        // "Voice call" and hid the camera; a null conversationId broke JS.
+        val b = result.bundle
+        state = state.copy(callId = b.callId, conversationId = b.conversationId, media = b.media)
+        dispatch(Event.HttpOk(created = b.created))
       }
+      HttpResult.Gone -> dispatch(Event.HttpGone)
+      HttpResult.Timeout -> dispatch(Event.HttpTimeout)
+      is HttpResult.AuthFailed -> dispatch(Event.HttpFailed(result.code))
+      is HttpResult.Failed -> dispatch(Event.HttpFailed(result.code))
     }
   }
 
-  private fun onReconnectResult(result: HttpResult) {
-    synchronized(lock) {
-      when (result) {
-        is HttpResult.Ok -> {
-          bundle = result.bundle
-          media.join(result.bundle)
-        }
-        HttpResult.Gone, is HttpResult.AuthFailed -> dispatch(Event.HttpGone)
-        HttpResult.Timeout -> Unit // budget timer is the backstop
+  private fun onReconnectResult(requestGen: Int, result: HttpResult) {
+    if (requestGen != gen || state.phase != Phase.RECONNECTING) return
+    when (result) {
+      is HttpResult.Ok -> {
+        // Fresh token (and possibly URL): rejoin with it. MEDIA_CONNECTED
+        // on the new room returns us to ACTIVE.
+        bundle = result.bundle
+        media.join(result.bundle)
       }
+      HttpResult.Gone -> dispatch(Event.HttpGone)
+      is HttpResult.AuthFailed -> dispatch(Event.HttpFailed(result.code))
+      // Transient: the reconnect budget timer is the backstop.
+      HttpResult.Timeout, is HttpResult.Failed -> Unit
     }
   }
 
   // ── timers ──────────────────────────────────────────────────────────
 
+  private fun schedule(key: String, delayMs: Long, event: Event) {
+    val g = gen
+    // The timer fires on its own thread; hop onto the queue, and only
+    // act if it is still the same call (a cancel can lose the race).
+    timers.schedule(key, delayMs) { post { if (g == gen) dispatch(event) } }
+  }
+
   private fun runTimers(before: MachineState, after: MachineState) {
-    if (before.phase != after.phase) {
-      when (after.phase) {
-        Phase.RINGING_IN -> {
-          val deadline = ring?.ringDeadlineEpochMs ?: return
-          timers.schedule(T_DEADLINE, (deadline - timers.nowMs()).coerceAtLeast(0)) {
-            synchronized(lock) { dispatch(Event.RingDeadline) }
-          }
-        }
-        Phase.ENDED -> timers.schedule(T_LINGER, ENDED_LINGER_MS) {
-          synchronized(lock) { dispatch(Event.LingerElapsed) }
-        }
-        Phase.RECONNECTING -> timers.schedule(T_RECONNECT, RECONNECT_BUDGET_MS) {
-          synchronized(lock) { dispatch(Event.ReconnectBudgetElapsed) }
-        }
-        else -> Unit
-      }
-      when (before.phase) {
-        Phase.RINGING_IN -> timers.cancel(T_DEADLINE)
-        Phase.ENDED -> timers.cancel(T_LINGER)
-        Phase.RECONNECTING -> timers.cancel(T_RECONNECT)
-        else -> Unit
+    if (before.phase == after.phase) return
+    when (before.phase) {
+      Phase.RINGING_IN -> timers.cancel(T_DEADLINE)
+      Phase.ENDED -> timers.cancel(T_LINGER)
+      Phase.RECONNECTING -> timers.cancel(T_RECONNECT)
+      Phase.CONNECTING -> timers.cancel(T_CONNECT)
+      Phase.RINGING_OUT -> timers.cancel(T_RING_OUT)
+      else -> Unit
+    }
+    when (after.phase) {
+      Phase.RINGING_IN -> {
+        val deadline = ring?.ringDeadlineEpochMs ?: return
+        // Floor at the clock slack: a ring we decided is not stale
+        // still gets a moment on screen even if this clock runs ahead.
+        val delay = (deadline - timers.nowMs()).coerceAtLeast(CLOCK_SLACK_MS)
+        schedule(T_DEADLINE, delay, Event.RingDeadline)
       }
+      Phase.ENDED -> schedule(T_LINGER, ENDED_LINGER_MS, Event.LingerElapsed)
+      Phase.RECONNECTING -> schedule(T_RECONNECT, RECONNECT_BUDGET_MS, Event.ReconnectBudgetElapsed)
+      Phase.CONNECTING -> schedule(T_CONNECT, CONNECT_WATCHDOG_MS, Event.ConnectTimeout)
+      Phase.RINGING_OUT -> schedule(T_RING_OUT, RING_OUT_BACKSTOP_MS, Event.AllRingsResolved("no_answer"))
+      else -> Unit
     }
   }
 }