telegram-tui/docs/ios/hardening.md

iOS Hardening Notes

Phase 6 real-device validation is blocked on this machine until full Xcode is selected.

Current local blocker:

xcode-select: error: tool 'xcodebuild' requires Xcode, but active developer directory '/Library/Developer/CommandLineTools' is a command line tools instance

Implemented hardening hooks:

• SessionLifecycleCoordinator suspends polling while the app is backgrounded.
• Account switches increment a session generation counter.
• Events are accepted only when both account id and generation match the active session, preventing stale events from a previous account from reaching view models.

Manual smoke still required after Xcode/TDLib device setup:

1. Auth with real Telegram credentials.
2. Load chats, open multiple chats, send/edit/delete/reply/forward/react.
3. Background and foreground during history load and media download.
4. Switch accounts rapidly while receiving updates.
5. Confirm no stale events from the previous account mutate the active account.