feat: tiered Nostr data layer, thread anchoring, FlashList v2 & app-view REST (all changes since main)

CONTEXT.md

@@ -70,9 +70,10 @@ heuristics, unlike engagement state.
 without a dedicated always-on subscription. Seam: `ingestOwnContent`.
 
 **Viewer-state** — a viewer's relation to a post (did _I_ like / repost / quote /
-reply; do I follow this profile). Authoritative source is the client-side
-own-events relay sync (NOT nagg) — see **own-events sync** and ADR 0002 (which
-supersedes ADR 0001's nagg approach).
+reply; do I follow this profile). The local store stays authoritative (optimistic
+LWW, ADR 0002), but its **seed source** is now the tiered facade, not a hardcoded
+relay sub — see **tiered facade** and ADR 0003 (which supersedes ADR 0002's
+relay-only seeding while keeping its store-authority mandate).
 
 **Own-events sync** — `useOwnEventsSync` (`shared/lib/nostr/ownsync/`): one
 long-lived app-level relay subscription for all our own events
@@ -91,3 +92,71 @@ toggles.
 **Replied index** — `nostrSocialStore.repliedByEventId` (target id → our reply):
 drives the "you replied" comment-icon highlight, populated from our own kind:1
 reply e-tags by the own-events sync.
+
+## Tiered Nostr data layer
+
+**Tiered facade** — `@sovranbitcoin/nagg-ts`, the single opinionated entry point
+for every Nostr read. Expressed in app domain terms (feed, thread, notifications,
+conversations, social graph, own viewer-state, mint reviews); internally selects
+the best available **tier** and hides fallback, bundling, ordering, validation,
+dedupe, and cache-write. Callers never choose a tier or assemble events. See
+ADR 0003.
+
+**Tier** — one of three independently-operated read sources, tried in order:
+**nagg** (we operate; gold, fully bundled + ranked) → **Primal cache** (Primal
+operates, we build only a client adapter; almost as good) → **raw relays** (many
+operators; the rough-but-functional floor). A tier that can't answer a given read
+returns `unsupported` and the facade falls through to the next.
+
+**Bundle** — one enriched response per read: notes + author profiles + aggregate
+stats + (optionally) the per-viewer action overlay, joined client-side by id.
+Replaces N round-trips with one batch.
+
+**NoteStats vs NoteActions** — the load-bearing split. **NoteStats** = viewer-
+INDEPENDENT aggregate counts (likes/reposts/replies/zaps), cacheable and shared
+across viewers, held in the stats store. **NoteActions** = the per-VIEWER overlay
+("which of THESE did I like/repost/…"), never cacheable across viewers, held in
+the single authoritative viewer-state store. Adding a new engagement type is a
+field on each, not three new maps.
+
+**Ordering manifest** — a server-authoritative ordered id list (`FeedRange`
+style) returned alongside the unordered bundle. The client renders strictly by it,
+index by index; ids absent from the manifest aren't rendered. A structural defense
+against the list reshuffling under your thumb. The relay floor synthesizes one
+from a stable sort key (created_at).
+
+**Live seam** — the ONE place a caller explicitly asks for relays: a listener that
+surfaces a "Load new" pill for items newer than the current page (feeds-recent,
+follow deltas, own-state deltas). nagg owns history/pagination; the listener only
+cares about items newer than the page, never backfill.
+
+**Own-history endpoints** — the paginated nagg own-events read family (authored,
+replies, likes, reposts, zaps-sent, bookmarks, follows, mutes, relays), cursor =
+`(created_at, id)`, lazy paging. Seeds the viewer-state store on cold start and
+lets the user scroll back past the local cap. nagg is the only tier that covers
+all action types; Primal lacks my-likes / my-reposts, so those fall through to
+relays.
+
+**Seen state** — one timestamp "seen-up-to" published as a NIP-78 kind-30078
+app-data event so it syncs across devices via relays AND is readable on the
+backend-free relay tier. Unread = `count(created_at > seenUntil)`.
+
+## Thread reading
+
+**Thread anchor** — the tapped/focused note a thread opens on. It stays visually
+fixed while the parent chain prepends above it (the T1 full-thread update) and
+replies append below. Achieved by `initialScrollIndex` (land on the note) +
+`maintainVisibleContentPosition` (bare → `{ data: true, size: true }`: `data`
+compensates the parent prepend, `size` absorbs measurement reconciliation) +
+the **focus reserve**. The thread never auto-pins to the bottom — it omits the DM
+`ChatScreen`'s `initialScrollAtEnd` / `alignItemsAtEnd` / `maintainScrollAtEnd`.
+See ADR 0004.
+
+**Focus reserve** — `focusReserve`: extra `paddingBottom` the thread adds so the
+focused note can be scrolled to (and held at) the top. mVCP's prepend
+compensation is clamped at the max scroll offset, so without room below, a short
+thread drops the note when parents load, the scroll snaps, and the note can't be
+refocused. The reserve = `viewport − (rows below the note × approx height)`,
+shrinking to 0 as replies fill the screen. Owned in `ThreadView` (not the
+library's opaque `anchoredEndSpace`) so it's deterministic and logged
+(`thread.reserve`). See [[Thread anchor]] and ADR 0004.

__tests__/apiClientBackendConfig.test.ts

@@ -61,92 +61,22 @@ describe('apiClient backend config routing', () => {
     Reflect.deleteProperty(globalThis, 'fetch');
   });
 
-  it('routes Nostr profile through app-view REST and search through GraphQL', async () => {
+  it('routes Nostr profile through app-view REST', async () => {
     process.env.EXPO_PUBLIC_API_BASE_URL = 'https://api.example.test/api/';
     process.env.EXPO_PUBLIC_NOSTR_APPVIEW_BASE_URL = 'http://localhost:8080/';
 
-    const { auditMint, fetchNostrProfile, searchUsers } =
+    const { auditMint, fetchNostrProfile } =
       jest.requireActual<typeof import('@/shared/lib/apiClient')>('@/shared/lib/apiClient');
 
     await fetchNostrProfile(PUBKEY);
-    await searchUsers({ query: 'jack' });
     await auditMint({ mintUrl: 'https://mint.example.test' });
 
+    // Profile search moved to the tier-selecting facade (searchProfilesViaFacade),
+    // so apiClient no longer issues a GraphQL ProfileSearch here.
     expect(mockFetch.mock.calls.map(([url]) => url)).toEqual([
       `http://localhost:8080/nostr/profile?pubkey=${PUBKEY}`,
-      'http://localhost:8080/graphql',
       'https://api.example.test/api/cashu/mint/audit?mintUrl=https%3A%2F%2Fmint.example.test',
     ]);
-    expect(JSON.parse(mockFetch.mock.calls[1]?.[1]?.body as string)).toMatchObject({
-      operationName: 'ProfileSearch',
-      variables: {
-        input: {
-          query: 'jack',
-          limit: 10,
-          sort: 'globalPagerank',
-        },
-      },
-    });
-  });
-
-  it('parses GraphQL profile search responses through the existing searchUsers schema', async () => {
-    process.env.EXPO_PUBLIC_NOSTR_APPVIEW_BASE_URL = 'http://localhost:8080/';
-    mockFetch.mockResolvedValueOnce({
-      ok: true,
-      status: 200,
-      statusText: 'OK',
-      json: async () => ({
-        data: {
-          profileSearch: {
-            query: 'jack',
-            limit: 1,
-            sort: 'globalPagerank',
-            fromCache: true,
-            nodes: [
-              {
-                pubkey: PUBKEY,
-                npub: 'npub1sg6p7p0ak80lh3ugjjvn9yshrmgr4wldxj547gh4t7dkxutj8mnqalaspq',
-                rank: 0.01,
-                score: null,
-                searchRank: 0.2,
-                searchScore: 35,
-                profileScore: null,
-                name: 'jack',
-                displayName: null,
-                picture: 'https://example.test/avatar.png',
-                image: null,
-                banner: null,
-                about: null,
-                nip05: null,
-                nip05Valid: null,
-                website: null,
-                lud16: null,
-                lud06: null,
-                followers: null,
-                follows: null,
-                createdAt: '2026-06-01T12:00:00Z',
-              },
-            ],
-          },
-        },
-      }),
-    });
-
-    const { searchUsers } =
-      jest.requireActual<typeof import('@/shared/lib/apiClient')>('@/shared/lib/apiClient');
-
-    const result = await searchUsers({ query: 'jack', limit: 1 });
-
-    expect(result.isOk()).toBe(true);
-    if (result.isOk()) {
-      expect(result.value.results[0]).toMatchObject({
-        pubkey: PUBKEY,
-        score: null,
-        name: 'jack',
-        created_at: 1780315200,
-      });
-      expect(result.value.results[0]).not.toHaveProperty('displayName');
-    }
   });
 
   it('routes mint reviews through the Nostr GraphQL endpoint', async () => {

__tests__/backendConfig.test.ts

@@ -7,9 +7,7 @@ describe('backend config', () => {
       apiBaseUrl: 'https://api.sovran.money/api',
       scoreApiBaseUrl: 'https://nagg.up.railway.app',
       nostrGraphqlEndpoint: 'https://nagg.up.railway.app/graphql',
-      nostrDmAppView: false,
-      nostrFeedAppView: false,
-      nostrNotificationsAppView: false,
+      primalCacheUrl: 'wss://cache2.primal.net/v1',
     });
   });
 
@@ -26,42 +24,10 @@ describe('backend config', () => {
       apiBaseUrl: 'https://api.example.test/api',
       scoreApiBaseUrl: 'http://localhost:8080',
       nostrGraphqlEndpoint: 'http://localhost:8081/graphql',
-      nostrDmAppView: false,
-      nostrFeedAppView: false,
-      nostrNotificationsAppView: false,
+      primalCacheUrl: 'wss://cache2.primal.net/v1',
     });
   });
 
-  it('enables the DM app-view transport only when explicitly set to "true"', () => {
-    expect(parseBackendConfig({ EXPO_PUBLIC_NOSTR_DM_APPVIEW: 'true' }).nostrDmAppView).toBe(true);
-    expect(parseBackendConfig({ EXPO_PUBLIC_NOSTR_DM_APPVIEW: 'false' }).nostrDmAppView).toBe(
-      false
-    );
-    expect(parseBackendConfig({}).nostrDmAppView).toBe(false);
-  });
-
-  it('enables the feed app-view transport only when explicitly set to "true"', () => {
-    expect(parseBackendConfig({ EXPO_PUBLIC_NOSTR_FEED_APPVIEW: 'true' }).nostrFeedAppView).toBe(
-      true
-    );
-    expect(parseBackendConfig({ EXPO_PUBLIC_NOSTR_FEED_APPVIEW: 'false' }).nostrFeedAppView).toBe(
-      false
-    );
-    expect(parseBackendConfig({}).nostrFeedAppView).toBe(false);
-  });
-
-  it('enables the notifications app-view transport only when explicitly set to "true"', () => {
-    expect(
-      parseBackendConfig({ EXPO_PUBLIC_NOSTR_NOTIFICATIONS_APPVIEW: 'true' })
-        .nostrNotificationsAppView
-    ).toBe(true);
-    expect(
-      parseBackendConfig({ EXPO_PUBLIC_NOSTR_NOTIFICATIONS_APPVIEW: 'false' })
-        .nostrNotificationsAppView
-    ).toBe(false);
-    expect(parseBackendConfig({}).nostrNotificationsAppView).toBe(false);
-  });
-
   it('keeps the legacy Nagg base URL env as an app-view fallback', () => {
     expect(
       parseBackendConfig({
@@ -83,6 +49,14 @@ describe('backend config', () => {
     ).toBe('https://nostr-index.example.test');
   });
 
+  it('defaults the Primal cache URL and honors an override', () => {
+    expect(parseBackendConfig({}).primalCacheUrl).toBe('wss://cache2.primal.net/v1');
+    expect(
+      parseBackendConfig({ EXPO_PUBLIC_PRIMAL_CACHE_URL: 'wss://my-cache.example/v1' })
+        .primalCacheUrl
+    ).toBe('wss://my-cache.example/v1');
+  });
+
   it('rejects invalid Nostr app-view URLs', () => {
     expect(() =>
       parseBackendConfig({