1plugins {2 id "com.android.application"3 id "org.jetbrains.kotlin.android"4 id "org.jetbrains.kotlin.plugin.compose"5 id "org.jetbrains.kotlin.plugin.parcelize"6 id "org.jetbrains.kotlin.plugin.serialization"7 id "kotlin-kapt"8 id "com.google.dagger.hilt.android"9}1011android {12 namespace "com.peachpasswords"13 compileSdk 351415 // VERSION is the single semantic-version authority. versionCode remains16 // Android/Gradle metadata because Kepr's manifest does not carry it; the17 // updater enforces exact VERSION plus a strictly newer code.18 def versionAuthorityFile = rootProject.file("VERSION")19 if (!versionAuthorityFile.isFile()) {20 throw new GradleException("VERSION is missing; it is the semantic-version authority")21 }22 def semanticVersion = versionAuthorityFile.getText("UTF-8").trim()23 if (!(semanticVersion ==~ /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/)) {24 throw new GradleException("VERSION must contain exactly one strict major.minor.patch value")25 }26 def versionParts = semanticVersion.split("\\.")27 def vMajor = versionParts[0].toInteger()28 def vMinor = versionParts[1].toInteger()29 def vPatch = versionParts[2].toInteger()30 if (vMajor > 99 || vMinor > 99 || vPatch > 999) {31 throw new GradleException("VERSION components exceed versionCode encoding range (major/minor <= 99, patch <= 999)")32 }33 // Derive a strictly-monotonic versionCode from semver so it can never34 // accidentally stay flat across releases (which breaks the updater's35 // versionCode > currentVersionCode identity gate).36 def derivedVersionCode = vMajor * 1000000 + vMinor * 10000 + vPatch * 103738 defaultConfig {39 applicationId "com.peachpasswords"40 minSdk 2641 targetSdk 3542 versionCode derivedVersionCode43 versionName semanticVersion4445 testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"46 vectorDrawables {47 useSupportLibrary true48 }49 }5051 signingConfigs {52 release {53 // Read from local.properties (koh-ignored) so the keystore and its54 // password never enter version history. Absent on a machine without55 // the key -> release build stays unsigned rather than failing.56 def props = new Properties()57 def f = rootProject.file("local.properties")58 if (f.exists()) { f.withInputStream { props.load(it) } }59 if (props.getProperty("peachStoreFile")) {60 storeFile file(props.getProperty("peachStoreFile"))61 storePassword props.getProperty("peachStorePassword")62 keyAlias props.getProperty("peachKeyAlias")63 keyPassword props.getProperty("peachKeyPassword")64 }65 // v3 is the only escape hatch from "this key is forever": it carries a66 // rotation lineage, so a future key can be proven to descend from this67 // one instead of forcing every tester to uninstall and lose their68 // vault. AGP leaves it off unless asked.69 enableV2Signing true70 enableV3Signing true71 }72 }7374 splits {75 abi {76 enable true77 reset()78 include "arm64-v8a", "x86_64"79 universalApk false80 }81 }8283 buildTypes {84 debug {85 applicationIdSuffix ".debug"86 versionNameSuffix "-debug"87 debuggable true88 }89 release {90 signingConfig signingConfigs.release91 minifyEnabled false92 proguardFiles getDefaultProguardFile("proguard-android-optimize.txt"), "proguard-rules.pro"93 }94 }9596 compileOptions {97 sourceCompatibility JavaVersion.VERSION_1798 targetCompatibility JavaVersion.VERSION_1799 }100101 kotlinOptions {102 jvmTarget = "17"103 }104105 buildFeatures {106 compose true107 buildConfig true108 }109110 composeOptions {111 kotlinCompilerExtensionVersion "1.5.15"112 }113114 packaging {115 resources {116 excludes += [117 "/META-INF/{AL2.0,LGPL2.1}",118 "META-INF/DEPENDENCIES",119 "META-INF/LICENSE*",120 "META-INF/NOTICE*",121 ]122 }123 }124125 testOptions {126 unitTests.returnDefaultValues = true127 unitTests.all {128 def coreDir = rootProject.file("../peach-browser/crypto-core")129 def nativeLibrary = new File(130 coreDir,131 "target/release/libpeach_noise_core.dylib",132 )133 if (coreDir.exists()) {134 dependsOn rootProject.tasks.named("buildRustNoiseHost")135 systemProperty "peach.noise.library.path", nativeLibrary.absolutePath136 }137 }138 }139}140141dependencies {142 implementation platform("androidx.compose:compose-bom:2024.06.00")143 androidTestImplementation platform("androidx.compose:compose-bom:2024.06.00")144145 implementation "androidx.activity:activity-compose:1.9.2"146 implementation "androidx.autofill:autofill:1.1.0"147 implementation "androidx.biometric:biometric:1.1.0"148 implementation "androidx.core:core-splashscreen:1.0.1"149 implementation "androidx.appcompat:appcompat:1.7.0"150 implementation "androidx.credentials:credentials:1.5.0"151 implementation "androidx.credentials:credentials-play-services-auth:1.5.0"152 implementation "androidx.glance:glance-appwidget:1.1.0"153 implementation "androidx.glance:glance-material3:1.1.0"154 implementation "androidx.hilt:hilt-navigation-compose:1.2.0"155 // In-app updates: a periodic release check that survives Doze without a156 // service. hilt-work lets the worker take UpdateRepository by injection157 // rather than reaching for a global.158 implementation "androidx.hilt:hilt-work:1.2.0"159 kapt "androidx.hilt:hilt-compiler:1.2.0"160 implementation "androidx.work:work-runtime-ktx:2.9.1"161 implementation "androidx.lifecycle:lifecycle-runtime-compose:2.8.4"162 implementation "androidx.lifecycle:lifecycle-viewmodel-compose:2.8.4"163 implementation "androidx.lifecycle:lifecycle-process:2.8.4"164 implementation "androidx.navigation:navigation-compose:2.8.0"165 // Deliberately pinned to 1.1.0-alpha06 (audit M-12). 1.1.0 stable exists166 // now and GradleDependency lint flags this coordinate; a bump is a policy167 // choice (Tink runtime vs. baseline AES, master-key rotation semantics),168 // not an oversight, and is tracked separately. Exact alpha (never a floating169 // range) so the resolved artifact is reproducible. Used only for the170 // duress/license EncryptedSharedPreferences; the vault slots are sealed by171 // VaultCrypto, not this.172 implementation "androidx.security:security-crypto:1.1.0-alpha06"173 implementation "androidx.compose.material3:material3"174 implementation "androidx.compose.ui:ui"175 implementation "androidx.compose.ui:ui-tooling-preview"176 implementation "androidx.compose.foundation:foundation"177 implementation "androidx.compose.material:material-icons-extended"178 implementation "androidx.core:core-ktx:1.13.1"179 implementation "com.google.android.material:material:1.12.0"180181 implementation "com.google.dagger:hilt-android:2.51.1"182 kapt "com.google.dagger:hilt-compiler:2.51.1"183 implementation "com.google.zxing:core:3.5.3"184 implementation "androidx.camera:camera-core:1.3.4"185 implementation "androidx.camera:camera-camera2:1.3.4"186 implementation "androidx.camera:camera-lifecycle:1.3.4"187 implementation "androidx.camera:camera-view:1.3.4"188 implementation "com.squareup.okhttp3:okhttp:4.12.0"189 implementation "org.bouncycastle:bcprov-jdk18on:1.78.1"190 // zstd-jni (reference libzstd) — per-section compression for the PeachScript191 // PCHS binary format (MF-2). Required for cross-platform interop with the192 // browser's zstd sections. The @aar variant ships the Android jniLibs193 // (lib/<abi>/libzstd-jni.so); the plain jar bundles only desktop natives and194 // would fail with UnsatisfiedLinkError on-device.195 implementation "com.github.luben:zstd-jni:1.5.6-3@aar"196 // The @aar ships only Android .so; the plain jar carries the desktop natives197 // the host JVM unit tests need.198 testImplementation "com.github.luben:zstd-jni:1.5.6-3"199 implementation "org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.1"200 implementation "org.jetbrains.kotlinx:kotlinx-serialization-json:1.7.1"201202 debugImplementation "androidx.compose.ui:ui-tooling"203 debugImplementation "androidx.compose.ui:ui-test-manifest"204205 androidTestImplementation "androidx.test.ext:junit:1.2.1"206 androidTestImplementation "androidx.test:core:1.6.1"207 androidTestImplementation "androidx.test.espresso:espresso-core:3.6.1"208 androidTestImplementation "androidx.compose.ui:ui-test-junit4"209210 testImplementation "junit:junit:4.13.2"211 // Real org.json on the unit-test classpath; android.jar's is a throwing stub,212 // so the release-manifest parser would otherwise be untestable off-device.213 testImplementation "org.json:json:20240303"214 testImplementation "org.jetbrains.kotlinx:kotlinx-coroutines-test:1.8.1"215}