4ea8f7862a
Implements the verifiable pure-Kotlin core of the Android client per
docs/ANDROID_CLIENT_PLAN.md, mirroring the iOS SPM package set as Gradle modules.
Built + reviewed via multi-agent workflow (explore→implement→verify→review),
then review findings fixed with regression tests.
Modules (all pure JVM, kotlin("jvm"); Android-framework modules scaffolded but
gated off in settings — no Android SDK in this env):
- :wire-protocol — frozen wire contract (sealed Client/ServerMessage, enums,
HostEndpoint CSWSH origin derivation, transport interfaces), hand-rolled codec
byte-identical to the server's JSON.stringify + tolerant kotlinx decode.
- :session-core — ReconnectMachine (1→2→4→8→16→30 backoff), PingScheduler,
GateTracker (two-line epoch guard), AwayDigest, UnreadLedger, TitleSanitizer,
KeyByteMap (byte-matches public/keybar.ts).
- :api-client — all REST routes, tolerant decode, Origin-iff-guarded, prefs
unknown-key preservation, pairing probe + host-tier classifier.
- :client-tls — pure half: PKCS#12 parse, X509KeyManager alias logic,
CertificateSummary, provider-agnostic wrong-passphrase classification.
- :test-support — FakeTransport / FakeHttpTransport / virtual-clock fakes.
Verify: ./gradlew clean test → 218 tests, 0 failures (wire-protocol 47,
session-core 60, api-client 69, client-tls 27, test-support 15).
Review (3 lenses, 8/10 each) findings fixed: sessionId JSON-injection escape,
CancellationException propagation in PingScheduler, PairingProbe close-on-cancel
leak, HostEndpoint trim, HostClassifier hoisted to :wire-protocol (type unified),
BouncyCastle-portable wrong-passphrase detection, lone-surrogate escaping.
Known gap (documented, deferred): /push/fcm-token has no server route yet —
plan task A33 (src/push/fcm.ts) delivers it.
43 lines
584 B
Plaintext
43 lines
584 B
Plaintext
# Gradle
|
|
.gradle/
|
|
build/
|
|
**/build/
|
|
!gradle/wrapper/gradle-wrapper.jar
|
|
!src/**/build/
|
|
|
|
# Gradle caches / config-cache
|
|
.gradle/configuration-cache/
|
|
|
|
# IDE — IntelliJ IDEA / Android Studio
|
|
.idea/
|
|
*.iml
|
|
*.ipr
|
|
*.iws
|
|
captures/
|
|
.navigation/
|
|
|
|
# Local machine config (never commit)
|
|
local.properties
|
|
|
|
# Android build outputs (relevant once the SDK-gated modules are enabled)
|
|
*.apk
|
|
*.aab
|
|
*.ap_
|
|
*.dex
|
|
release/
|
|
proguard/
|
|
|
|
# Secrets — never commit
|
|
google-services.json
|
|
**/google-services.json
|
|
*.keystore
|
|
*.jks
|
|
*.p12
|
|
service-account*.json
|
|
|
|
# OS cruft
|
|
.DS_Store
|
|
|
|
# Kover / test reports
|
|
**/kover/
|