Kinden 0.13.0 — Android alpha

Kinden 0.13.0

Android now has a signed APK with encrypted local sessions, Firebase message and incoming-call notifications, native LiveKit voice calls, opt-in screen viewing, picture-in-picture, and screen-video sharing. Android notification registration respects account access, notification preferences, and device logout. Call-end events cancel incoming-call alerts.

Enable device notifications in Kinden settings and allow Android's notification permission. Android 7 or newer is required; picture-in-picture requires Android 8 or newer. Push requires Google Play services. Install future APKs over the existing app; retain the original signing key. Android screen sharing currently carries video, while system-audio capture remains Windows-only.

The webapp and Windows release include the matching client/backend changes. Windows continues to use its background updater.

Validation: 113 application tests; signed Android assemble, lint, unit-test task and APK signature verification; Windows updater manifest and packaged-client verification; production database-copy migration and integrity checks; Firebase OAuth and FCM validate-only request from the backend. Physical Android delivery, incoming calls and PiP still require device testing; this remains an early-alpha release.

Firebase project: kinden-3dada. The backend service account has only custom role projects/kinden-3dada/roles/kindenPushSender, containing cloudmessaging.messages.create. Its JSON key is mounted read-only at /run/secrets/kinden-fcm.json; FCM_CREDENTIALS_PATH selects it. Never place this key in client builds or source control.

Android signing material is held in private deployment files and private GitHub Actions secrets. Preserve it for future updates. Signed candidates are stored as draft releases in the private source repository, then verified and promoted to the public releases repository alongside Windows assets. The website discovers both APK and Windows installer from the latest public release.