Declare CAMERA in AndroidManifest so RustWebChromeClient can show the system permission dialog. Inject Permissions-Policy meta for camera access in the Tauri shell.
Inject a Tauri shell script during CI prep to disable service workers and attach Bearer tokens on cross-origin API requests. Enable Android third-party cookies in MainActivity and eval the same script from Rust on page load.
Add app_version to workflow_dispatch inputs and worker dispatch payload. Collect only setup.exe from bundle/nsis, prefer installer URLs in release lookup, and use git-tag-safe job IDs.
walk() only matches files, so ensureNetworkSecurityXml never found
app/src/main/res and skipped creating the XML. AndroidManifest still
referenced @xml/network_security_config, causing AAPT link failures.
Co-authored-by: ShuMengya <shumengya666@outlook.com>
Enable cleartext HTTP in release APK, add network security config, and set connect-src CSP. Add CORS on Worker API for cross-origin fetches from packaged apps.
Co-authored-by: Cursor <cursoragent@cursor.com>
tauri icon requires a square source image. Uploaded logos like 727x721
caused Prepare template to fail. Use sharp to center-crop to square
before generating platform icons.
Co-authored-by: ShuMengya <shumengya666@outlook.com>
- Build Android APK for arm64-v8a only (covers modern devices; saves ~5 min)
- Disable release LTO and raise codegen-units in CI via env overrides
- Cache Android NDK and Gradle dependencies between runs
- Share rust-cache key across Windows/Android jobs
Co-authored-by: ShuMengya <shumengya666@outlook.com>
sign-android-apk.sh now sources setup-android-signing.sh when
WEB2APP_ANDROID_KEYSTORE is unset, so signing works even when the
workflow invokes setup and sign as separate bash processes (e.g. CI re-runs
of older workflow definitions).
Co-authored-by: ShuMengya <shumengya666@outlook.com>
- Use workspace-scoped npm ci to avoid compiling better-sqlite3 on Windows
(Node 24 has no prebuilt binaries and node-gyp fails in CI)
- Source setup-android-signing.sh so WEB2APP_ANDROID_* vars reach sign script
Co-authored-by: ShuMengya <shumengya666@outlook.com>
