fix(release): require signed APK and refresh launcher icon

Author: tranhoangpich

.github/workflows/release.yml

@@ -65,7 +65,7 @@ jobs:
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v4
 
-      - name: Configure release signing (with safe fallback)
+      - name: Configure release signing
         id: signing
         env:
           RELEASE_KEYSTORE_BASE64: ${{ secrets.RELEASE_KEYSTORE_BASE64 }}
@@ -76,32 +76,36 @@ jobs:
           set -euo pipefail
 
           if [ -z "${RELEASE_KEYSTORE_BASE64:-}" ] || [ -z "${RELEASE_STORE_PASSWORD:-}" ] || [ -z "${RELEASE_KEY_ALIAS:-}" ] || [ -z "${RELEASE_KEY_PASSWORD:-}" ]; then
-            echo "enabled=false" >> "$GITHUB_OUTPUT"
-            echo "::warning::Release signing secrets are missing. Building unsigned APK."
-            exit 0
+            echo "::error::Release signing secrets are missing. Refusing to publish unsigned APK."
+            exit 1
           fi
 
           printf '%s' "$RELEASE_KEYSTORE_BASE64" | base64 --decode > release.jks
 
           if ! keytool -list -keystore release.jks -storepass "$RELEASE_STORE_PASSWORD" -alias "$RELEASE_KEY_ALIAS" >/dev/null 2>&1; then
             rm -f release.jks
-            echo "enabled=false" >> "$GITHUB_OUTPUT"
-            echo "::warning::Keystore validation failed. Building unsigned APK."
-            exit 0
+            echo "::error::Keystore validation failed. Refusing to publish unsigned APK."
+            exit 1
           fi
 
           printf 'RELEASE_STORE_FILE=../release.jks\n' > local.properties
           printf 'RELEASE_STORE_PASSWORD=%s\n' "$RELEASE_STORE_PASSWORD" >> local.properties
           printf 'RELEASE_KEY_ALIAS=%s\n' "$RELEASE_KEY_ALIAS" >> local.properties
           printf 'RELEASE_KEY_PASSWORD=%s\n' "$RELEASE_KEY_PASSWORD" >> local.properties
-          echo "enabled=true" >> "$GITHUB_OUTPUT"
 
       - name: Build release AAR
         run: ./gradlew :lib:assembleRelease
 
       - name: Build release APK
         run: ./gradlew :app:assembleRelease
 
+      - name: Verify APK is signed
+        env:
+          RELEASE_KEY_ALIAS: ${{ secrets.RELEASE_KEY_ALIAS }}
+        run: |
+          apksigner verify --print-certs app/build/outputs/apk/release/phoneclaw.apk | tee /tmp/apk-signing.txt
+          grep -q "Signer #1 certificate DN:" /tmp/apk-signing.txt
+
       - name: Clean up signing material
         if: always()
         run: rm -f release.jks local.properties

app/src/main/res/drawable-hdpi/ic_launcher_foreground.png

@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="utf-8"?>
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="108dp"
+    android:height="108dp"
+    android:viewportWidth="108"
+    android:viewportHeight="108">
+    <path
+        android:fillColor="#FFFFFF"
+        android:pathData="M18,67.5c0,-6.75 6.75,-31.5 36,-31.5s36,24.75 36,31.5c-13.5,9 -15.75,22.5 -36,22.5s-22.5,-13.5 -36,-22.5z" />
+    <path
+        android:fillColor="#FFFFFF"
+        android:pathData="M13.5,38.25c-9,1.35 -1.35,-24.75 5.85,-30.6c3.6,-3.15 9,-2.7 10.35,-2.25c1.35,0.45 -3.6,7.65 -5.4,12.6c-0.9,2.25 -5.85,19.35 -10.8,20.25z" />
+    <path
+        android:fillColor="#FFFFFF"
+        android:pathData="M94.5,38.25c9,1.35 1.35,-24.75 -5.85,-30.6c-3.6,-3.15 -9,-2.7 -10.35,-2.25c-1.35,0.45 3.6,7.65 5.4,12.6c0.9,2.25 5.85,19.35 10.8,20.25z" />
+    <path
+        android:fillColor="#FFFFFF"
+        android:pathData="M42.75,28.35a5.4,5.4 0,1 0,10.8 0a5.4,5.4 0,1 0,-10.8 0z M56.25,28.35a5.4,5.4 0,1 0,10.8 0a5.4,5.4 0,1 0,-10.8 0z" />
+    <path
+        android:fillColor="#FFFFFF"
+        android:pathData="M22.5,54L9,47.25L6.75,52.65L20.25,58.5z M20.25,67.5L6.75,69.75L6.75,75.6L20.25,73.35z M22.5,78.75L13.5,90L18,92.25L27,81z" />
+    <path
+        android:fillColor="#FFFFFF"
+        android:pathData="M85.5,54L99,47.25L101.25,52.65L87.75,58.5z M87.75,67.5L101.25,69.75L101.25,75.6L87.75,73.35z M85.5,78.75L94.5,90L90,92.25L81,81z" />
+</vector>

app/src/main/res/drawable-mdpi/ic_launcher_foreground.png

@@ -1,4 +1,4 @@
 <?xml version="1.0" encoding="utf-8"?>
 <resources>
-    <color name="ic_launcher_background">#B0D4F1</color>
+    <color name="ic_launcher_background">#0F766E</color>
 </resources>