v1.1.0

The share FAB now collects your session across a list of domains, the Google family by default, and shares one structured JSON document. You can edit the domain list from the overflow menu under Extra domains. Compound country domains like co.uk are grouped correctly. The agent API gains ?format=structured on /api/v1/cookies, which returns the same document.

APK sha256: 5df799cdd00b8fa79dbbe68c282659aec11cc2188a62dd195461e89b5e377402

v1.0.1

Build fix release for F-Droid inclusion: the signing validator now honors the marker that F-Droid's recipe creates, so the official build server can compile the unsigned release variant as it always does. No user-facing changes.

APK sha256: 56e230877b011721fd8517c3f8e0a8a8da9e2a699a71d9078db1e4d8cc0fa651

v1.0.0

First public release.

What this build does:

• Address bar plus in-app WebView. You log in by hand, with password, 2FA, OTP, or most SSO-redirect flows. Passkeys for third-party sites do not work in a third-party WebView; the README explains why.
• The share button extracts every cookie CookieManager holds for the loaded domain and hands them to the Android share sheet. A long-press on the same button opens a template editor with live preview ({payload}, {url}, {title}, {host}, {date}).
• Non-http OAuth redirects are caught before the error page and shared as one line, so a relay cannot corrupt the code. A Snackbar announces the capture.
• The overflow menu holds bookmarks, the session reset, the session monitor (native notification when your gateway reports a dead login), and the developer options with the debug channel and the /api/v1 agent API. Both are off by default and token-gated; the README documents every endpoint.

Install: download the APK, allow installs from this source when Android asks, open it. It needs only the INTERNET permission.

APK sha256: af01e0510adfede13464ba10e3a0f66433a38e55eecb646caa635a16c18acd05

License: Apache-2.0.