From e1bc34923bed8fd00c5a3cdacdfb7f102c87d7a3 Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Sun, 4 Oct 2026 23:02:15 -0700 Subject: Android: TWA activities only in the TWA build, push wakes run the bundled app, the origin fails closed; 1.9 (code 10). F-Droid review of 1.8: the shared manifest declared the TWA's LauncherActivity/IntentActivity in the webview and fdroid builds, which don't compile them (a second, crashing launcher icon). They move to src/twa/AndroidManifest.xml. WakeJob's off-screen WebView now answers the origin from assets like MainActivity's, and Assets returns 404 for any v3.coinos.io path it doesn't carry outside the live API list instead of fetching it. POST_NOTIFICATIONS is asked only when a UnifiedPush distributor is installed. The description names the third-party hosts (DoH, post media). Co-Authored-By: Claude Opus 5.5 --- fastlane/metadata/android/en-US/changelogs/10.txt | 1 + fastlane/metadata/android/en-US/full_description.txt | 2 ++ 2 files changed, 3 insertions(+) create mode 100644 fastlane/metadata/android/en-US/changelogs/10.txt (limited to 'fastlane') diff --git a/fastlane/metadata/android/en-US/changelogs/10.txt b/fastlane/metadata/android/en-US/changelogs/10.txt new file mode 100644 index 0000000..2310e09 --- /dev/null +++ b/fastlane/metadata/android/en-US/changelogs/10.txt @@ -0,0 +1 @@ +Push wake-ups run the bundled app, never the live site; files the APK doesn't carry are no longer fetched from the network. No stray launcher icon. Notification permission is asked only when a UnifiedPush distributor is installed. diff --git a/fastlane/metadata/android/en-US/full_description.txt b/fastlane/metadata/android/en-US/full_description.txt index 26ee251..fcace98 100644 --- a/fastlane/metadata/android/en-US/full_description.txt +++ b/fastlane/metadata/android/en-US/full_description.txt @@ -7,3 +7,5 @@ Bitcoin you actually hold: your wallet is twelve words, nobody else ever has the * Handles lightning:, bitcoin:, nostr: and lnurl: links and NFC taps This build carries the whole app inside the APK. The coinos servers are only reached for their APIs (the Ark server, Electrum, the name registrar). + +Other servers it talks to: Nostr relays (yours, configurable); Cloudflare's or Google's DNS-over-HTTPS, to look up and DNSSEC-verify name@domain payment addresses; and, while you read posts, whatever hosts the posts' pictures and link previews live on (YouTube thumbnails from i.ytimg.com among them). -- cgit v1.2.3